From e5909abea615992f81d505ea6c58d1c1f8f1f6dc Mon Sep 17 00:00:00 2001
From: actions <actions@github.com>
Date: Wed, 8 Jun 2022 20:57:10 +0000
Subject: [PATCH] Merge pull request #271 from brooksn/may_release_v1.21.13_r2

Update rke2-kube-proxy for v1.21.13+rke2r2
---
 ...-proxy-v1.21.13-rke2r2-build2022060801.tgz | Bin 0 -> 4338 bytes
 .../Chart.yaml                                |  12 ++
 .../templates/NOTES.txt                       |   2 +
 .../templates/_helpers.tpl                    |  21 +++
 .../templates/config.yaml                     |  69 +++++++++
 .../templates/daemonset.yaml                  |  78 ++++++++++
 .../templates/rbac.yaml                       |  12 ++
 .../templates/serviceaccount.yaml             |   5 +
 .../values.yaml                               | 142 ++++++++++++++++++
 index.yaml                                    |  16 ++
 10 files changed, 357 insertions(+)
 create mode 100755 assets/rke2-kube-proxy-1.21/rke2-kube-proxy-v1.21.13-rke2r2-build2022060801.tgz
 create mode 100755 charts/rke2-kube-proxy-1.21/rke2-kube-proxy/v1.21.13-rke2r2-build2022060801/Chart.yaml
 create mode 100755 charts/rke2-kube-proxy-1.21/rke2-kube-proxy/v1.21.13-rke2r2-build2022060801/templates/NOTES.txt
 create mode 100755 charts/rke2-kube-proxy-1.21/rke2-kube-proxy/v1.21.13-rke2r2-build2022060801/templates/_helpers.tpl
 create mode 100755 charts/rke2-kube-proxy-1.21/rke2-kube-proxy/v1.21.13-rke2r2-build2022060801/templates/config.yaml
 create mode 100755 charts/rke2-kube-proxy-1.21/rke2-kube-proxy/v1.21.13-rke2r2-build2022060801/templates/daemonset.yaml
 create mode 100755 charts/rke2-kube-proxy-1.21/rke2-kube-proxy/v1.21.13-rke2r2-build2022060801/templates/rbac.yaml
 create mode 100755 charts/rke2-kube-proxy-1.21/rke2-kube-proxy/v1.21.13-rke2r2-build2022060801/templates/serviceaccount.yaml
 create mode 100755 charts/rke2-kube-proxy-1.21/rke2-kube-proxy/v1.21.13-rke2r2-build2022060801/values.yaml

diff --git a/assets/rke2-kube-proxy-1.21/rke2-kube-proxy-v1.21.13-rke2r2-build2022060801.tgz b/assets/rke2-kube-proxy-1.21/rke2-kube-proxy-v1.21.13-rke2r2-build2022060801.tgz
new file mode 100755
index 0000000000000000000000000000000000000000..3252d433a2239811304626576778e9396469b196
GIT binary patch
literal 4338
zcmV<O5Do7iiwG0|00000|0w_~VMtOiV@ORlOnEsqVl!4SWK%V1T2nbTPgYhoO;>Dc
zVQyr3R8em|NM&qo0PH+#bK5qy{mfr+Cg~m9b4`kpA89$8o$EMB*V87^wbS-Pr;~xm
zBMB7<FaRi9>&<_^a{!VeDalTnY<709(V1ET&I<?Ug@>XSI0_f#1j9nBo7Lca&a{nI
zEEnH=u@=X1e0qHB{>E|K{~I5VM&AsNM<?+pK0O{i`6eD7509RF1M!y=VRtKyW%`@=
zvw8I=_ixfz!GA$*xRMDhhXE^!*4Jn>jD|-c*@zwm8Jbk{!n(l=X)F^0ek>;lV=|p6
zSm5ef>C7ZS2y2rHa>k`)T%vX(m@_UCNXgL5|7a%DIqE1?c>o|;jtN})KKO}EOyIkE
zW*Qh(>J%NlxwVB!27?*5^KwFj1{KkP!}5%R<&J5Elah;U6pu#nY5ZM04F1(C@^xF^
z|CdaZXufO!xZD4SN24c4eg8j>PagdLYqT&7gWxgnoXrrXN;}8(KIZz806=4*47W<J
z5~y8k&UA(nGiN(mqD2z`ST?)I!HC)0Il{#lSe9ut#&NZC1jiK&>LqHh%6|eSA$Sb?
z1}*jN#gY4O&tXvjx)?8yflG^e%2G7IWCnXl(g8Sa0UQJqF0(VwJAsNGiFGjrt4oAb
zAd_VQys&H{Dw4cd8qj6^6>qqWf(kN$dRFHb&o4<uGXyn-LS+WHbdyU(X)Nl9CiCkY
zC8SDD`K;8K9fH+tI^`)Clx~&`u23&|+MtoTrds8oN^5wAVCURajDp8-&4qvoLe9+l
z5;e;(b5eHbI(#P*agcyF7PVx82>hg2_KXQ8Q_rg=m~oA%#f(sB78*@~spZR#WLz4H
zEDNeGQbGd5I65AYY6rv9T0I4`^O{sWe@6KPrd(hY_&%@Bzo~0bQ`^#11xeE&0<7Sb
zt&l2ks?p3bi{MphEXh98$VfmtXA<I?_|;0LW7J$_2@Fs2*aS2nt!C+hZ2d93VmCZ5
zbC6{|K~3xU`s^(UA!+7HI{i6#C{V-s_-9C!M%a&OKp<P9lTYxRTVN*Sl?BZtfi>L1
zoXdkK0La<R81=c*n84BK$?11q3@&?OG?;+WYL0#(g-|K8cnBJ2OlN{Tstp|G>?SNw
zhh9kXqwQl)cgyd^<T8Qb(J+28asrZ8EYDGu*7@4o^KnN@mEoWN^ycctyI;>P-h#2r
zB1MU`c<T|*g);an<2HfeJf_tk$`_fy4rw&xiJaDVgH2oQUf2$Y7i-i6M#r8>@EBex
z@*)MLaep$jm|7rRirQ@g-}w{u5xBR@GawbJDJ*dH)MZO37}tjE%!03xCJ0kxw$unS
zX3<o!sF<?>-V~^Lj?yww1DPbKKK($@>u}NvlGohMp-|d3;c|{l*g2$gOcz_C=9ZwD
z4CB$s={=$Iw<P&}3t%UNMsS4|FfZ)NDUTZplu_VC`unpj0oIeGiOo?IO{S^JIqLJ%
zzL<hkGIX>LeH?O2MDfm8&E*W30iL0>e9BWF6RH42tKuR<YD*?yu8gJXF$(HWZ<eSv
z_bXXPcklEUQz#7)cZrA=u8ICm!b7+sdnaXdg6fiQi`549oxoC&v*o#xVg(X0!|cF0
zd>y9Ggh=2c1)zZmxAi2a*E!P*Fa=AU1-owrOBZM<9KJ8PQ<f8(jAtDf>09NTK7;%g
zAHvb__oyS<Gv}1YPB^l~yoyK843<og9P=hd6R}2MpC(f#iCYtyY28p}h2qkBTQgp9
zhV}v^$38~02=-3Q-XZJ_bNc^iJ{skFb^K`u@3ml6yxuNYPbj9_65YXYXBq)8Eh&yD
znow=v&FIW6Hwz6GOfyQHf*ZGFloa<2T+ewrue7!FOUqG%nX6J{&R(o4(>Ywb5`oGK
zTEwz|i}5d4ehwr8-lU?;@SJD5;{35owEWu3<5-$>j#(*4jjICv?0mVGQyk{Tfst-&
zKtHP&k`~W7ern<Datsry5Uq7_Ko{?-q-qrmoy^q7q*SH!UO}nKW1s2b6O3m0&or1?
zh<1wOl=Ivo_Y&M8^b=fk&q}P5Uu(i`Ufb9Jo08BPQ{+phU3hu%x(X<NN`@(ywHUjl
z`1$#`4qBhiq|BO$20@Stj?$htQ%ay}j{CDx8(Sy*>p7<igNX&r)TP$-HfCK|20))3
zCe^c!&bgA-Rq15MYU&~_8f(_IdyO4=^a|nasz9%Y{~cd_x*YEdlfa3?A6G>*LHe53
zRnH!sm3FQ)|9hPmr%LDk^S*Uv?=qAt86ALe)y!lCt<kAqGpFA*hXe*orU!ygI%g{b
zHbZF#&6Y7*W4Ib?qmni>ni-g&y+)KE)C{JgG;=h8P_vix@ugF#Ojik<m>{TYp}G*N
z(%+A3J)Mm&>iTD2RT-Wl*b01k#${_J2Z5jEM;2K*Qt&Vzxhth2=lJ`NEU<cjA5~yg
z;&ckE;pmCuKJ-MZ8r7FdMo?j*rd|_u`k_4>pZYbgrtUWrWRoP)Yn9<xX=~he^%swu
zvlWH6B@;X&rA>rN7p8L2VKj=4qIfVmKCC_;4~|9$k<)O7Q&x(4J{{5afBXFaa%8gM
zPwMbxcq3XANR=V2%URu()T^gd9va%dge?1`TJUahNr@&!W1?mvJL{lu7{~D;(EooA
zl*+G&@LBdp0^#@Hf8RbMK-tu0Q!Z#eR0&?=WW9=HBZCYl<!n$87|fZ>1jU60DG356
zq7Mwey2WXwMX!+r_DX}=6?%KHuSACW0F;Kky0+Pa{i!qRx_fE%qNc2z2qqVYRTYge
zL1RO<WL&t^>e=n5rPe5|STzOH!J0y+xbp}ua0quc(BFB^)%77vO6$<f%2>?zjHk6A
zmlY&rL#{fO^@)~CQ&MeBf&9?d{7hW4m4PV}!oY+!zt#CcqZ2QYD?w<J7CeT_`T&ON
ze&^2y_9r;wl8ib;nbF@vpn98BKn|}oG!Xx-rc*;%k4viQ`4SJv58MW?@`6-JQ|6da
za8Ww*p<#W1MW$Wt6PycOOkuy2-tRc6EIuTTaTp)aWMm~|ee9x{%v3H`kj|AsNpm9r
zH?PL>3yn*z%0`9G?7f4pR0-G2=OaU9&75Z$$~u}kk>1dr#J1_=Tq@mA<Hq?Vm$PXp
z4nf&D>L!ekoK&n%oWH7T%%VyvpKu8KFFE@|>AyyQadiKB2oxw1*c(Q}(>)&;ic%NK
zppWU?w2*VQa3@=ac0x3rd3`LQ3Q|QWxetv}SyDFlRx0tvf<}SNAWfQLZkBP%bxhRL
zKP1AMxe2)<ZGtW!mAcT}VCKtHJI9qX$^v!Hq<0RDxmx;F_s3zLldqk~KB9p1{WquX
zSDxKVrRyt|`dmvWDzKz4`ltk27h;VKEU>Vk3Y2vbG&+fMR|ky@m7A1bw^y8gX<1PS
zo;n{V!*I44l7~EPJSS)sP~gaufMd;RV_Ta+tAwER^}ghGeV0;&MCUBmnp?j_b-eE$
z+*P*Y+?UpxYL@j;s>42a2yayq%!HaSk+|ZSBFJ-3@)Bp<SiMT%(WC!o7d8K+*1!L;
zm=}UsG=tY~-oChs?2Y|w9{1h<#>a8*{^#WM=;8k7tF#~2b<&(sVUGSdjR`?P{lUrp
z!`p8Ee>X=_pf-^$KJzO09{(Q>PoDJr|McWIe(?XV(Qa=;%GX>XJo2gbU6sDy=_=Vi
zg7CwKfB^XvBEN}>e1eX)X6FXJpi*KAkN(RH9(@`n3WLp;M{5aCW?MhkQy_DGmodxU
zWnAASH~~IqmObZsi?|!oZUgVixb=YK;{|WdP~NT2D*n9ucO1-o`qZ|mrGMDgVsPh_
z|JCOH(0Xlm{P(N*C0+vE6aP<+j{5cA>Cy4=L;U|5Eeyk;_Xd!{C+)l{1E4<%{38qi
z+<|rjx{fXt<l;LMaWz;D-BtI{A#@(w+}<_;q}31qfcK@c2p>K;l#PS@z@Ou@G{wTU
z&eOXTH$u`Te4i7*#2@b8MaF@wG1As~{+)O&z)imGqxIWcf6$ceOasv-0e2yA7yI{x
zfe#;`(rD{p&h0IviU~9+_ESL%u0?p=*I%fO7d35xdV?*b^=lhy?dLCDd=D3`0oK!Z
zk5RTmbGZhyY0*3}X-+z}qHTfPRJu)z)_anB32wsnNp8F_X_4xU^-=u^^td@nZlm_b
zYLsoyGg?@i!+oBc?<m^ny}>?m`@w}@_s%Pb7Nr_8>VUKszxznxZp>%A<-Fu-(=E{L
zyX%gT?J(~9FmG>N#nXH@_mD9gH0n16ZmFx={)^|AriZ^YQG0aLWcxE-{;ApS#@d)^
zbAi7>Vf_eTL(1xk{&Ktps~-9YZ7#QIa;pw(TD)xTr#lY5?%pK61FNrt?fkYeyNlDG
zVY5EaU4yj`dHZa(!FSm#xXcoF+v*<qpSO>69l*9L$rhW<;r{C9{lMpIihN7VlhwWC
z`Wg^qDTEvAT-UXzwfbu^>${Xqw#`_d_g&}uZ8CSj^+}dlaghn!wmPka=^=Gq3I=|`
z!s-GOzFpwz5We--pvlvQTpOvg(u4pXJ~-YLS~Xnn+N!VDT>9I)CMdZa^Ze>EfhiLP
zt8R(*TIt1W_p6OZk7|!~KiBw$7p~9SlsBbUtO#<ntS&kQo1myB#)=|ozY?r}AF|Qq
zZZoQWf3EPb(fr7^d;ga)%#}3w`M(CcXa9E`Kk5Je>q&h2aQ^pIT6;ssioy(*!^%IO
zyY;_9yVE}x-<j}peAE<}x+^~Sl0a!sHD@-R|I}i$i&1T=Nu7rpA*qQDg<UiNY9Xq<
zN%KQB-xK-=oibY!3Sm$hJ#cSS1`{p^J%S!44E+Y^X>%^va<bOWx`R@e&|&?I>FKxo
zuird>@$U86s}~0iD9UA99Ix;Ot{DM;<@!>qJZW_TOgW0|5~tnX?&f|u><v1kF|+f;
zsVt&gOi{i8^FJ4&L{cxz9Vf~WeE85VMhG`r|IUa~(#Ei5vvuyO_>D^;#!B#XmB7XH
zwX$Q42BmGFwpe48k}xebw<~u(aAVuLC^TPkfiuh!_u8i!S}IZI_)3-1n)V9h)Z=xt
zWw~3FcS_Tt(NSUVM4J@nPj@%S5@hxGZat)tWpAWd^=8tQS(kEfQ*A|rN*5cXtHH1{
z*rh>p&K1@7W&>UDNw_(-RkTc+dOgqm$-_&oO+8t1kk`J#=wOjCUUi}fREI47jbOyp
zKp7H5mN!AO%E}plV8-}*#hYtL)WTGA%Tp$TT3E^xwwCS8Jxl8Ec|4WM+QX(h*luxf
z+iYn3lcBRTC53J=kS@UM?N($_=UlqV{0Gfa^xL2-|Ku`(qqv4s0(}AB3Udo2jaPF%
z%Q7Vmtxcm#RS=HS3B0)B#+n9k$AEX076V#3XDV$+`*Y@Q-Pv1HT<*00usWf7#fs!(
zoN&j$U9#WhI$q3|T;Lmh?w;uMIBoH&J9%w)u^rmz`dnFL%;J^R%;Ie2X=^0}m$RSU
zQ0p}AXW2XtOu(lB&*QR<@K9m@N3`Abzn-x4%lr=f)BpX4(>OkQsQ<r4Yu9{k#XG+s
zSYPSXn|7a*FO|S&TxML(I=h2)AWmEot$yDWXeF>JI9b7e(5fu%U>DTKPAzT?ai62R
z<V`vG15@k&;R%O%)k&BSCkH#*ZvU@p4(3((Ig#K#{~sRp{C^Y=<A;C$<*T%<?$X-`
gZhH8GA3d~(_Rt>MzkB<?00030|9F@P*8olc0KSQZ@Bjb+

literal 0
HcmV?d00001

diff --git a/charts/rke2-kube-proxy-1.21/rke2-kube-proxy/v1.21.13-rke2r2-build2022060801/Chart.yaml b/charts/rke2-kube-proxy-1.21/rke2-kube-proxy/v1.21.13-rke2r2-build2022060801/Chart.yaml
new file mode 100755
index 0000000..e73d131
--- /dev/null
+++ b/charts/rke2-kube-proxy-1.21/rke2-kube-proxy/v1.21.13-rke2r2-build2022060801/Chart.yaml
@@ -0,0 +1,12 @@
+apiVersion: v1
+appVersion: v1.21.13-rke2r2
+description: Install Kube Proxy.
+keywords:
+- kube-proxy
+maintainers:
+- email: charts@rancher.com
+  name: Rancher Labs
+name: rke2-kube-proxy
+sources:
+- https://github.com/rancher/rke2-charts
+version: v1.21.13-rke2r2-build2022060801
diff --git a/charts/rke2-kube-proxy-1.21/rke2-kube-proxy/v1.21.13-rke2r2-build2022060801/templates/NOTES.txt b/charts/rke2-kube-proxy-1.21/rke2-kube-proxy/v1.21.13-rke2r2-build2022060801/templates/NOTES.txt
new file mode 100755
index 0000000..2da0e24
--- /dev/null
+++ b/charts/rke2-kube-proxy-1.21/rke2-kube-proxy/v1.21.13-rke2r2-build2022060801/templates/NOTES.txt
@@ -0,0 +1,2 @@
+Kube-proxy has been installed.
+
diff --git a/charts/rke2-kube-proxy-1.21/rke2-kube-proxy/v1.21.13-rke2r2-build2022060801/templates/_helpers.tpl b/charts/rke2-kube-proxy-1.21/rke2-kube-proxy/v1.21.13-rke2r2-build2022060801/templates/_helpers.tpl
new file mode 100755
index 0000000..cb64d1f
--- /dev/null
+++ b/charts/rke2-kube-proxy-1.21/rke2-kube-proxy/v1.21.13-rke2r2-build2022060801/templates/_helpers.tpl
@@ -0,0 +1,21 @@
+{{- define "system_default_registry" -}}
+{{- if .Values.global.systemDefaultRegistry -}}
+{{- printf "%s/" .Values.global.systemDefaultRegistry -}}
+{{- else -}}
+{{- "" -}}
+{{- end -}}
+{{- end -}}
+{{- define "rke2_data_dir" -}}
+{{- if .Values.global.rke2DataDir -}}
+{{- printf "%s" .Values.global.rke2DataDir -}}
+{{- else -}}
+{{- "/var/lib/rancher/rke2" -}}
+{{- end -}}
+{{- end -}}
+{{- define "kubeproxy_kubeconfig" -}}
+{{- if .Values.global.rke2DataDir -}}
+{{- printf "%s/agent/kubeproxy.kubeconfig" .Values.global.rke2DataDir -}}
+{{- else -}}
+{{- printf "%s" .Values.clientConnection.kubeconfig -}}
+{{- end -}}
+{{- end -}}
diff --git a/charts/rke2-kube-proxy-1.21/rke2-kube-proxy/v1.21.13-rke2r2-build2022060801/templates/config.yaml b/charts/rke2-kube-proxy-1.21/rke2-kube-proxy/v1.21.13-rke2r2-build2022060801/templates/config.yaml
new file mode 100755
index 0000000..f8bb5cc
--- /dev/null
+++ b/charts/rke2-kube-proxy-1.21/rke2-kube-proxy/v1.21.13-rke2r2-build2022060801/templates/config.yaml
@@ -0,0 +1,69 @@
+---
+apiVersion: v1
+data:
+  config.conf: |-
+    apiVersion: kubeproxy.config.k8s.io/v1alpha1
+    bindAddress: {{ .Values.bindAddress | quote }}
+    clientConnection:
+      acceptContentTypes: {{ .Values.clientConnection.acceptContentTypes | quote }}
+      burst: {{ .Values.clientConnection.burst }}
+      contentType: {{ .Values.clientConnection.contentType | quote }}
+      kubeconfig: {{ include "kubeproxy_kubeconfig" . | quote }}
+      qps: {{ .Values.clientConnection.qps }} 
+    clusterCIDR: {{ coalesce .Values.global.clusterCIDR .Values.clusterCIDR | quote }}
+    configSyncPeriod: {{ .Values.configSyncPeriod }}
+    conntrack:
+      maxPerCore: {{ .Values.conntrack.maxPerCore }}
+      min: {{ .Values.conntrack.min }}
+      tcpCloseWaitTimeout: {{ .Values.conntrack.tcpCloseWaitTimeout | quote }}
+      tcpEstablishedTimeout: {{ .Values.conntrack.tcpEstablishedTimeout | quote }}
+    detectLocalMode: {{ .Values.detectLocalMode | quote }}
+    enableProfiling: {{ .Values.enableProfiling }}
+    healthzBindAddress: {{ .Values.healthzBindAddress | quote }}
+    hostnameOverride: {{ .Values.hostnameOverride | quote }}
+    iptables:
+      masqueradeAll: {{ .Values.iptables.masqueradeAll }}
+      masqueradeBit: {{ .Values.iptables.masqueradeBit }}
+      {{ if .Values.iptables.minSyncPeriod }}
+      minSyncPeriod: {{ .Values.iptables.minSyncPeriod }}
+      {{ end }}
+      syncPeriod: {{ .Values.iptables.syncPeriod }}
+    ipvs:
+      excludeCIDRs: {{ .Values.ipvs.excludeCIDRs | quote }}
+      {{ if .Values.ipvs.minSyncPeriod }}
+      minSyncPeriod: {{ .Values.ipvs.minSyncPeriod }}
+      {{ end }}
+      scheduler: {{ .Values.ipvs.scheduler | quote }}
+      strictARP: {{ .Values.ipvs.strictARP }}
+      syncPeriod: {{ .Values.ipvs.syncPeriod }}
+      {{ if .Values.ipvs.tcpFinTimeout }}
+      tcpFinTimeout: {{ .Values.ipvs.tcpFinTimeout }}
+      {{ end }}
+      {{ if .Values.ipvs.tcpTimeout }}
+      tcpTimeout: {{ .Values.ipvs.tcpTimeout }}
+      {{ end }}
+      {{ if .Values.ipvs.udpTimeout }}
+      udpTimeout: {{ .Values.ipvs.udpTimeout }}
+      {{ end }}
+    kind: KubeProxyConfiguration
+    metricsBindAddress: {{ .Values.metricsBindAddress | quote }}
+    mode: {{ .Values.proxy.mode | quote }}
+    nodePortAddresses: null
+    oomScoreAdj: {{ .Values.oomScoreAdj }}
+    portRange: {{ .Values.proxy.portRange | quote }}
+    showHiddenMetricsForVersion: {{ .Values.showHiddenMetricsForVersion | quote }}
+    udpIdleTimeout: {{ .Values.udpTimeout | quote }}
+    featureGates:
+    {{- range  $key, $value := .Values.featureGates }}
+      {{ $key }}: {{ $value }}
+    {{- end }}
+    winkernel:
+      enableDSR: false
+      networkName: ""
+      sourceVip: ""
+kind: ConfigMap
+metadata:
+  labels:
+    app: kube-proxy
+  name: kube-proxy
+  namespace: kube-system
diff --git a/charts/rke2-kube-proxy-1.21/rke2-kube-proxy/v1.21.13-rke2r2-build2022060801/templates/daemonset.yaml b/charts/rke2-kube-proxy-1.21/rke2-kube-proxy/v1.21.13-rke2r2-build2022060801/templates/daemonset.yaml
new file mode 100755
index 0000000..1267df8
--- /dev/null
+++ b/charts/rke2-kube-proxy-1.21/rke2-kube-proxy/v1.21.13-rke2r2-build2022060801/templates/daemonset.yaml
@@ -0,0 +1,78 @@
+apiVersion: apps/v1
+kind: DaemonSet
+metadata:
+  labels:
+    k8s-app: kube-proxy
+  name: kube-proxy
+  namespace: kube-system
+spec:
+  selector:
+    matchLabels:
+      k8s-app: kube-proxy
+  template:
+    metadata:
+      labels:
+        k8s-app: kube-proxy
+    spec:
+      containers:
+      - command:
+        - /usr/local/bin/kube-proxy
+        - --config=/var/lib/kube-proxy/config.conf
+        - --hostname-override=$(NODE_NAME)
+        env:
+        - name: NODE_NAME
+          valueFrom:
+            fieldRef:
+              apiVersion: v1
+              fieldPath: spec.nodeName
+        image: {{ template "system_default_registry" . }}{{ .Values.image.repository }}:{{ .Values.image.tag }}
+        imagePullPolicy: IfNotPresent
+        name: kube-proxy
+        securityContext:
+          privileged: true
+        volumeMounts:
+        - mountPath: /var/lib/kube-proxy
+          name: kube-proxy
+        - mountPath: {{ template "rke2_data_dir" . }}/agent
+          name: rke2config
+          readOnly: true
+        - mountPath: /run/xtables.lock
+          name: xtables-lock
+        - mountPath: /lib/modules
+          name: lib-modules
+          readOnly: true
+      dnsPolicy: ClusterFirst
+      hostNetwork: true
+      nodeSelector:
+        kubernetes.io/os: linux
+      priorityClassName: system-node-critical
+      restartPolicy: Always
+      schedulerName: default-scheduler
+      securityContext: {}
+      serviceAccount: kube-proxy
+      serviceAccountName: kube-proxy
+      terminationGracePeriodSeconds: 30
+      tolerations:
+      - key: CriticalAddonsOnly
+        operator: Exists
+      - operator: Exists
+      volumes:
+      - hostPath:
+          path: {{ template "rke2_data_dir" . }}/agent
+          type: ""
+        name: rke2config
+      - configMap:
+          name: kube-proxy
+        name: kube-proxy
+      - hostPath:
+          path: /run/xtables.lock
+          type: FileOrCreate
+        name: xtables-lock
+      - hostPath:
+          path: /lib/modules
+          type: ""
+        name: lib-modules
+  updateStrategy:
+    rollingUpdate:
+      maxUnavailable: 1
+    type: RollingUpdate
diff --git a/charts/rke2-kube-proxy-1.21/rke2-kube-proxy/v1.21.13-rke2r2-build2022060801/templates/rbac.yaml b/charts/rke2-kube-proxy-1.21/rke2-kube-proxy/v1.21.13-rke2r2-build2022060801/templates/rbac.yaml
new file mode 100755
index 0000000..d98f84c
--- /dev/null
+++ b/charts/rke2-kube-proxy-1.21/rke2-kube-proxy/v1.21.13-rke2r2-build2022060801/templates/rbac.yaml
@@ -0,0 +1,12 @@
+apiVersion: rbac.authorization.k8s.io/v1
+kind: ClusterRoleBinding
+metadata:
+  name: rke2:node-proxier
+roleRef:
+  apiGroup: rbac.authorization.k8s.io
+  kind: ClusterRole
+  name: system:node-proxier
+subjects:
+- kind: ServiceAccount
+  name: kube-proxy
+  namespace: kube-system
diff --git a/charts/rke2-kube-proxy-1.21/rke2-kube-proxy/v1.21.13-rke2r2-build2022060801/templates/serviceaccount.yaml b/charts/rke2-kube-proxy-1.21/rke2-kube-proxy/v1.21.13-rke2r2-build2022060801/templates/serviceaccount.yaml
new file mode 100755
index 0000000..59408a2
--- /dev/null
+++ b/charts/rke2-kube-proxy-1.21/rke2-kube-proxy/v1.21.13-rke2r2-build2022060801/templates/serviceaccount.yaml
@@ -0,0 +1,5 @@
+kind: ServiceAccount
+apiVersion: v1
+metadata:
+  name: kube-proxy
+  namespace: kube-system
diff --git a/charts/rke2-kube-proxy-1.21/rke2-kube-proxy/v1.21.13-rke2r2-build2022060801/values.yaml b/charts/rke2-kube-proxy-1.21/rke2-kube-proxy/v1.21.13-rke2r2-build2022060801/values.yaml
new file mode 100755
index 0000000..93bf4d7
--- /dev/null
+++ b/charts/rke2-kube-proxy-1.21/rke2-kube-proxy/v1.21.13-rke2r2-build2022060801/values.yaml
@@ -0,0 +1,142 @@
+---
+
+# image for kubeproxy
+image:
+  repository: rancher/hardened-kubernetes
+  tag: v1.21.13-rke2r2-build20220608
+
+# The IP address for the proxy server to serve on 
+# (set to '0.0.0.0' for all IPv4 interfaces and '::' for all IPv6 interfaces)
+bindAddress: 0.0.0.0
+
+# If true cleanup iptables and ipvs rules and exit.
+cleanup: 
+
+# The CIDR range of pods in the cluster. 
+# When configured, traffic sent to a Service cluster IP from outside this range 
+# will be masqueraded and traffic sent from pods to an external 
+# LoadBalancer IP will be directed to the respective cluster IP instead
+clusterCIDR: 10.42.0.0/16
+
+# The path to the configuration file.
+config: 
+
+# How often configuration from the apiserver is refreshed. Must be greater than 0.
+configSyncPeriod: 15m0s
+
+conntrack:
+  # Maximum number of NAT connections to track per CPU core (0 to leave the limit as-is and ignore conntrack-min).
+  maxPerCore: 32768
+  # Minimum number of conntrack entries to allocate, regardless of conntrack-max-per-core (set conntrack-max-per-core=0 to leave the limit as-is).
+  min: 131072
+  # NAT timeout for TCP connections in the CLOSE_WAIT state
+  tcpTimeoutCloseWait: 1h0m0s
+  # Idle timeout for established TCP connections (0 to leave as-is)
+  tcpTimeoutEstablished: 24h0m0s
+
+# Mode to use to detect local traffic
+detectLocalMode: 
+
+# A set of key=value pairs that describe feature gates for alpha/experimental features:
+featureGates: 
+
+# The IP address with port for the health check server to serve on
+# (set to '0.0.0.0:10256' for all IPv4 interfaces and '[::]:10256' for all IPv6 interfaces). Set empty to disable.
+healthzBindAddress: 0.0.0.0:10256
+
+# help for kube-proxy
+help: 
+
+# If non-empty, will use this string as identification instead of the actual hostname.
+hostnameOverride: 
+
+iptables:
+  # If using the pure iptables proxy, SNAT all traffic sent via Service cluster IPs (this not commonly needed)
+  masqueradeAll: 
+  # If using the pure iptables proxy, the bit of the fwmark space to mark packets requiring SNAT with. Must be within the range [0, 31].
+  masqueradeBit: 14
+  # The minimum interval of how often the iptables rules can be refreshed as endpoints and services change (e.g. '5s', '1m', '2h22m').
+  minSyncPeriod: 
+  # The maximum interval of how often iptables rules are refreshed (e.g. '5s', '1m', '2h22m'). Must be greater than 0.
+  syncPeriod: 30s
+
+ipvs:
+  # A comma-separated list of CIDR's which the ipvs proxier should not touch when cleaning up IPVS rules.
+  excludeCidrs:
+  # The minimum interval of how often the ipvs rules can be refreshed as endpoints and services change (e.g. '5s', '1m', '2h22m').
+  minSyncPeriod: 
+  # The ipvs scheduler type when proxy mode is ipvs
+  scheduler:
+  # Enable strict ARP by setting arp_ignore to 1 and arp_announce to 2
+  strictArp: 
+  # The maximum interval of how often ipvs rules are refreshed (e.g. '5s', '1m', '2h22m'). Must be greater than 0.
+  syncPeriod: 30s
+  # The timeout for idle IPVS TCP connections, 0 to leave as-is. (e.g. '5s', '1m', '2h22m').
+  tcpTimeout: 
+  # The timeout for IPVS TCP connections after receiving a FIN packet, 0 to leave as-is. (e.g. '5s', '1m', '2h22m').
+  tcpfinTimeout:
+  # The timeout for IPVS UDP packets, 0 to leave as-is. (e.g. '5s', '1m', '2h22m').
+  udpTimeout:
+
+
+clientConnection:        
+  # Burst to use while talking with kubernetes apiserver
+  apiBurst: 10
+  # Content type of requests sent to apiserver.
+  apiContentType:
+  # QPS to use while talking with kubernetes apiserver
+  qps: 5
+  # Path to kubeconfig file with authorization information (the master location is set by the master flag).
+  kubeconfig: /var/lib/rancher/rke2/agent/kubeproxy.kubeconfig
+
+# Maximum number of seconds between log flushes
+logFlushFrequency: 5s
+
+
+
+# The address of the Kubernetes API server (overrides any value in kubeconfig)
+master: 
+
+# The IP address with port for the metrics server to serve on 
+# (set to '0.0.0.0:10249' for all IPv4 interfaces and '[::]:10249' for all IPv6 interfaces). Set empty to disable.
+metricsBindAddress: 127.0.0.1:10249
+
+# A string slice of values which specify the addresses to use for NodePorts. 
+# Values may be valid IP blocks (e.g. 1.2.3.0/24, 1.2.3.4/32). The default empty string slice ([]) means to use all local addresses.
+nodeportAddresses:
+
+# The oom-score-adj value for kube-proxy process. Values must be within the range [-1000, 1000]
+oomScoreAdj: -999
+
+# If true enables profiling via web interface on /debug/pprof handler.
+profiling:
+
+proxy:
+  # Which proxy mode to use: 'userspace' (older) or 'iptables' (faster) or 'ipvs'. 
+  # If blank, use the best-available proxy (currently iptables). 
+  # If the iptables proxy is selected, regardless of how, but the system's 
+  # kernel or iptables versions are insufficient, this always falls back to the userspace proxy.
+  mode:
+# Range of host ports (beginPort-endPort, single port or beginPort+offset, inclusive) 
+# that may be consumed in order to proxy service traffic. 
+# If (unspecified, 0, or 0-0) then ports will be randomly chosen.
+  portRange:
+
+# The previous version for which you want to show hidden metrics. 
+# Only the previous minor version is meaningful, other values will not be allowed.
+# The format is <major>.<minor>, e.g.: '1.16'. The purpose of this format is make 
+# sure you have the opportunity to notice if the next release hides additional metrics, 
+# rather than being surprised when they are permanently removed in the release after that.
+showHiddenMetricsForVersion:
+
+# How long an idle UDP connection will be kept open (e.g. '250ms', '2s'). 
+# Must be greater than 0. Only applicable for proxy-mode=userspace
+udpTimeout: 250ms
+
+# Print version information and quit
+version: 
+
+# If set, write the default configuration values to this file and exit.
+writeConfigTo:
+global:
+  systemDefaultRegistry: ""
diff --git a/index.yaml b/index.yaml
index 602311b..73e31ef 100755
--- a/index.yaml
+++ b/index.yaml
@@ -3789,6 +3789,22 @@ entries:
     - assets/rke2-ingress-nginx/rke2-ingress-nginx-1.36.300.tgz
     version: 1.36.300
   rke2-kube-proxy:
+  - apiVersion: v1
+    appVersion: v1.21.13-rke2r2
+    created: "2022-06-08T20:57:10.364930785Z"
+    description: Install Kube Proxy.
+    digest: 8330c1fe53fd0616aa47ad7c49105cea344c25340a7ef54f1953caa140282573
+    keywords:
+    - kube-proxy
+    maintainers:
+    - email: charts@rancher.com
+      name: Rancher Labs
+    name: rke2-kube-proxy
+    sources:
+    - https://github.com/rancher/rke2-charts
+    urls:
+    - assets/rke2-kube-proxy-1.21/rke2-kube-proxy-v1.21.13-rke2r2-build2022060801.tgz
+    version: v1.21.13-rke2r2-build2022060801
   - apiVersion: v1
     appVersion: v1.21.13-rke2r1
     created: "2022-05-25T01:34:30.784146673Z"