rancher-turtles-chart: Update to 0.16.0

Align with https://github.com/suse-edge/charts/pull/186
2025-02-20 09:47:12 +00:00 · 2025-02-20 09:47:12 +00:00 · eff9a9b0c5
commit eff9a9b0c5
parent 8d336f380b
14 changed files with 332 additions and 340 deletions
--- a/rancher-turtles-chart/Chart.lock
+++ b/rancher-turtles-chart/Chart.lock
@ -1,6 +1,6 @@
 dependencies:
 - name: cluster-api-operator
  repository: https://kubernetes-sigs.github.io/cluster-api-operator
-  version: 0.14.0
-digest: sha256:9e9e851dbab3212c279efec06bcf0da147228ea1590470f3a8cbbb5806a250d4
-generated: "2024-12-03T09:34:12.871417074Z"
+  version: 0.16.0
+digest: sha256:9b296be6ee446bff492e6736e084ce3734b07ea613791b77fd15d31c0f62dc70
+generated: "2025-01-30T10:14:58.692942399Z"
--- a/rancher-turtles-chart/Chart.yaml
+++ b/rancher-turtles-chart/Chart.yaml
@ -1,5 +1,5 @@
-#!BuildTag: %%IMG_PREFIX%%rancher-turtles-chart:%%CHART_MAJOR%%.0.0_up0.14.1
-#!BuildTag: %%IMG_PREFIX%%rancher-turtles-chart:%%CHART_MAJOR%%.0.0_up0.14.1-%RELEASE%
+#!BuildTag: %%IMG_PREFIX%%rancher-turtles-chart:%%CHART_MAJOR%%.0.0_up0.16.0
+#!BuildTag: %%IMG_PREFIX%%rancher-turtles-chart:%%CHART_MAJOR%%.0.0_up0.16.0-%RELEASE%
 annotations:
  catalog.cattle.io/certified: rancher
  catalog.cattle.io/display-name: Rancher Turtles - the Cluster API Extension
@ -12,7 +12,7 @@ annotations:
  catalog.cattle.io/scope: management
  catalog.cattle.io/type: cluster-tool
 apiVersion: v2
-appVersion: 0.14.1
+appVersion: 0.16.0
 dependencies:
 - condition: cluster-api-operator.enabled
  name: cluster-api-operator
@ -29,4 +29,4 @@ keywords:
 - provisioning
 name: rancher-turtles
 type: application
-version: "%%CHART_MAJOR%%.0.0+up0.14.1"
+version: "%%CHART_MAJOR%%.0.0+up0.16.0"
--- a/rancher-turtles-chart/questions.yml
+++ b/rancher-turtles-chart/questions.yml
@ -13,66 +13,32 @@ questions:
        type: boolean
        description: "Flag to enable or disable installation of cert-manager. If set to false then you will need to install cert-manager manually"
        label: "Enable Cert Manager"
-  - variable: rancherTurtles.features.cluster-api-operator.cleanup
+      - variable: rancherTurtles.cluster-api-operator.cleanup
        default: true
        description: "Specify that the CAPI Operator post-delete cleanup job will be performed"
        type: boolean
        label: Cleanup CAPI Operator installation
        group: "CAPI Operator cleanup settings"
-    show_subquestion_if: true
-    subquestions:
-    - variable: rancherTurtles.features.cluster-api-operator.kubectlImage
-      default: "rancher/kubectl:v1.30.3"
-      description: "Specify the image to use when cleaning up the Cluster API Operator manifests"
-      type: string
-      label: Cleanup Image
-      group: "CAPI Operator cleanup settings"
-  - variable: rancherTurtles.features.rancher-webhook.cleanup
-    default: true
-    description: "Specify that the Rancher embedded cluster api webhooks should be removed"
-    type: boolean
-    label: Cleanup Rancher Embedded CAPI Webhooks
-    group: "Rancher webhook cleanup settings"
-    show_subquestion_if: true
-    subquestions:
-    - variable: rancherTurtles.features.rancher-webhook.kubectlImage
-      default: "rancher/kubectl:v1.30.3"
-      description: "Specify the image to use when cleaning up the webhooks"
-      type: string
-      label: Webhook Cleanup Image
-      group: "Rancher webhook cleanup settings"
-  - variable: rancherTurtles.features.rancher-kubeconfigs.label
-    default: false
-    description: "(Experimental) Specify that the kubeconfigs generated by Rancher should be automatically patched to contain the CAPI expected labels"
-    type: boolean
-    label: Label Rancher Kubeconfigs
-    group: "Rancher Turtles Features Settings"
-  - variable: rancherTurtles.features.managementv3-cluster.enabled
-    default: true
-    description: "Use v3/management cluster manifest for import, instead of v1/provisioning"
-    type: boolean
-    label: Use management v3 cluster manifest
-    group: "Rancher Turtles Features Settings"
-  - variable: rancherTurtles.features.managementv3-cluster-migration.enabled
-    default: false
-    description: "Automatically migrate between provisioning and management clusters on upgrade"
-    type: boolean
-    label: All imported clusters will use new cluster manifest, replacing old cluster manifest.
-    group: "Rancher Turtles Features Settings"
      - variable: cluster-api-operator.cluster-api.rke2.enabled
        default: "true"
        description: "Flag to enable or disable installation of the RKE2 provider for Cluster API. By default this is enabled."
        label: "Enable RKE2 Provider"
        type: boolean
-  - variable: rancherTurtles.features.propagate-labels.enabled
-    default: false
-    description: "(Experimental) Specify that the labels from CAPI should be propagated to Rancher"
-    type: boolean
-    label: Propagate CAPI Labels
-    group: "Rancher Turtles Features Settings"
      - variable: rancherTurtles.features.addon-provider-fleet.enabled
        default: false
-    description: "Enable Fleet Addon Provider functionality in Rancher Turtles"
+        description: "[BETA] Enable Fleet Addon Provider functionality in Rancher Turtles"
        type: boolean
        label: Seamless integration with Fleet and CAPI
        group: "Rancher Turtles Features Settings"
+      - variable: rancherTurtles.features.agent-tls-mode.enabled
+        default: false
+        description: "[ALPHA] If enabled Turtles will use the agent-tls-mode setting to determine CA cert trust mode for importing clusters"
+        type: boolean
+        label: Enable Agent TLS Mode
+        group: "Rancher Turtles Features Settings"
+      - variable: rancherTurtles.kubectlImage
+        default: "registry.suse.com/edge/3.2/kubectl:1.30.3"
+        description: "Specify the image to use when running kubectl in jobs"
+        type: string
+        label: Kubectl Image
+        group: "Rancher Turtles Features Settings"
--- a/rancher-turtles-chart/templates/addon-provider-fleet.yaml
+++ b/rancher-turtles-chart/templates/addon-provider-fleet.yaml
@ -35,10 +35,17 @@ data:
      cluster:
        patchResource: true
        setOwnerReferences: true
+        hostNetwork: true
        selector:
          matchLabels:
            cluster-api.cattle.io/rancher-auto-import: "true"
+          matchExpressions:
+            - key: cluster-api.cattle.io/disable-fleet-auto-import
+              operator: DoesNotExist
        namespaceSelector:
          matchLabels:
            cluster-api.cattle.io/rancher-auto-import: "true"
+          matchExpressions:
+            - key: cluster-api.cattle.io/disable-fleet-auto-import
+              operator: DoesNotExist
 {{- end }}
--- a/rancher-turtles-chart/templates/clusterctl-cm-cleanup-job.yaml
+++ b/rancher-turtles-chart/templates/clusterctl-cm-cleanup-job.yaml
@ -1,4 +1,4 @@
-{{- if index .Values "rancherTurtles" "features" "rancher-webhook" "cleanup" }}
+{{- if index .Values "rancherTurtles" "rancherInstalled" }}
 ---
 apiVersion: v1
 kind: ServiceAccount
@ -55,7 +55,7 @@ spec:
      serviceAccountName: pre-upgrade-job
      containers:
        - name: rancher-clusterctl-configmap-cleanup
-          image: {{ index .Values "rancherTurtles" "features" "rancher-webhook" "kubectlImage" }}
+          image: {{ index .Values "rancherTurtles" "kubectlImage" }}
          args:
          - delete
          - configmap
--- a/rancher-turtles-chart/templates/deployment.yaml
+++ b/rancher-turtles-chart/templates/deployment.yaml
@ -26,7 +26,7 @@ spec:
      containers:
      - args:
        - --leader-elect
-        - --feature-gates=propagate-labels={{ index .Values "rancherTurtles" "features" "propagate-labels" "enabled"}},managementv3-cluster={{ index .Values "rancherTurtles" "features" "managementv3-cluster" "enabled"}},rancher-kube-secret-patch={{ index .Values "rancherTurtles" "features" "rancher-kubeconfigs" "label"}}
+        - --feature-gates=addon-provider-fleet={{ index .Values "rancherTurtles" "features" "addon-provider-fleet" "enabled"}},agent-tls-mode={{ index .Values "rancherTurtles" "features" "agent-tls-mode" "enabled"}}
        {{- range .Values.rancherTurtles.managerArguments }}
        - {{ . }}
        {{- end }}  
@ -67,10 +67,10 @@ spec:
        resources:
          limits:
            cpu: 500m
-            memory: 128Mi
+            memory: 256Mi
          requests:
            cpu: 10m
-            memory: 64Mi
+            memory: 128Mi
      serviceAccountName: rancher-turtles-manager
      terminationGracePeriodSeconds: 10
      tolerations:
--- a/rancher-turtles-chart/templates/metal3-infrastructure.yaml
+++ b/rancher-turtles-chart/templates/metal3-infrastructure.yaml
@ -22,7 +22,7 @@ metadata:
 spec:
  providers:
  - name: metal3
-    url: "https://github.com/metal3-io/cluster-api-provider-metal3/releases/v1.7.2/infrastructure-components.yaml"
+    url: "https://github.com/rancher-sandbox/cluster-api-provider-metal3/releases/v1.9.2/infrastructure-components.yaml"
    type: InfrastructureProvider
 ---
 apiVersion: turtles-capi.cattle.io/v1alpha1
--- a/rancher-turtles-chart/templates/post-delete-job.yaml
+++ b/rancher-turtles-chart/templates/post-delete-job.yaml
@ -1,4 +1,4 @@
-{{- if index .Values "rancherTurtles" "features" "cluster-api-operator" "cleanup" }}
+{{- if index .Values "cluster-api-operator" "cleanup" }}
 ---
 apiVersion: v1
 kind: ServiceAccount
@ -41,7 +41,7 @@ metadata:
 subjects:
  - kind: ServiceAccount
    name: post-delete-job
-    namespace: rancher-turtles-system
+    namespace: '{{ .Values.rancherTurtles.namespace }}'
 roleRef:
  kind: ClusterRole
  name: post-delete-job-delete-webhooks
@ -62,7 +62,7 @@ spec:
      serviceAccountName: post-delete-job
      containers:
        - name: cluster-api-operator-mutatingwebhook-cleanup
-          image: {{ index .Values "rancherTurtles" "features" "cluster-api-operator" "kubectlImage" }}
+          image: {{ index .Values "rancherTurtles" "kubectlImage" }}
          command: ["kubectl"]
          args:
          - delete
@ -90,7 +90,7 @@ spec:
      serviceAccountName: post-delete-job
      containers:
        - name: cluster-api-operator-validatingwebhook-cleanup
-          image: {{ index .Values "rancherTurtles" "features" "cluster-api-operator" "kubectlImage" }}
+          image: {{ index .Values "rancherTurtles" "kubectlImage" }}
          command: ["kubectl"]
          args:
          - delete
@ -119,7 +119,7 @@ spec:
      restartPolicy: Never
      containers:
      - name: delete-capi-controller-manager
-        image: {{ index .Values "rancherTurtles" "features" "cluster-api-operator" "kubectlImage" }}
+        image: {{ index .Values "rancherTurtles" "kubectlImage" }}
        command: ["kubectl"]
        args:
        - delete
@ -128,7 +128,7 @@ spec:
        - {{ index .Values "cluster-api-operator" "cluster-api" "core" "namespace" }}
        - --ignore-not-found=true
      - name: delete-capi-kubeadm-bootstrap-controller-manager
-        image: {{ index .Values "rancherTurtles" "features" "cluster-api-operator" "kubectlImage" }}
+        image: {{ index .Values "rancherTurtles" "kubectlImage" }}
        command: ["kubectl"]
        args:
        - delete
@ -137,7 +137,7 @@ spec:
        - capi-kubeadm-bootstrap-system
        - --ignore-not-found=true
      - name: delete-capi-kubeadm-control-plane-controller-manager
-        image: {{ index .Values "rancherTurtles" "features" "cluster-api-operator" "kubectlImage" }}
+        image: {{ index .Values "rancherTurtles" "kubectlImage" }}
        command: ["kubectl"]
        args:
        - delete
@ -146,7 +146,7 @@ spec:
        - capi-kubeadm-control-plane-system
        - --ignore-not-found=true
      - name: delete-rke2-kubeadm-bootstrap-controller-manager
-        image: {{ index .Values "rancherTurtles" "features" "cluster-api-operator" "kubectlImage" }}
+        image: {{ index .Values "rancherTurtles" "kubectlImage" }}
        command: ["kubectl"]
        args:
        - delete
@ -155,7 +155,7 @@ spec:
        - {{ index .Values "cluster-api-operator" "cluster-api" "rke2" "bootstrap" "namespace" }}
        - --ignore-not-found=true
      - name: delete-rke2-control-plane-controller-manager
-        image: {{ index .Values "rancherTurtles" "features" "cluster-api-operator" "kubectlImage" }}
+        image: {{ index .Values "rancherTurtles" "kubectlImage" }}
        command: ["kubectl"]
        args:
        - delete
--- a/rancher-turtles-chart/templates/post-upgrade-job.yaml
+++ b/rancher-turtles-chart/templates/post-upgrade-job.yaml
@ -1,10 +1,9 @@
-{{- if eq (index .Values "rancherTurtles" "features" "managementv3-cluster-migration" "enabled") true }}
 ---
 apiVersion: v1
 kind: ServiceAccount
 metadata:
  name: post-upgrade-job
-  namespace: rancher-turtles-system
+  namespace: '{{ .Values.rancherTurtles.namespace }}'
  annotations:
    "helm.sh/hook": post-upgrade
    "helm.sh/hook-weight": "1"
@ -24,13 +23,6 @@ rules:
  verbs:
  - list
  - delete
- apiGroups:
-  - management.cattle.io
-  resources:
-  - clusters
-  verbs:
-  - list
-  - delete
 ---
 apiVersion: rbac.authorization.k8s.io/v1
 kind: ClusterRoleBinding
@ -42,7 +34,7 @@ metadata:
 subjects:
  - kind: ServiceAccount
    name: post-upgrade-job
-    namespace: rancher-turtles-system
+    namespace: '{{ .Values.rancherTurtles.namespace }}'
 roleRef:
  kind: ClusterRole
  name: post-upgrade-job-delete-clusters
@ -52,6 +44,7 @@ apiVersion: batch/v1
 kind: Job
 metadata:
  name: post-upgrade-delete-clusters
+  namespace: '{{ .Values.rancherTurtles.namespace }}'
  annotations:
    "helm.sh/hook": post-upgrade
    "helm.sh/hook-weight": "2"
@ -62,17 +55,12 @@ spec:
      serviceAccountName: post-upgrade-job
      containers:
        - name: post-upgrade-delete-clusters
-          image: {{ index .Values "rancherTurtles" "features" "rancher-webhook" "kubectlImage" }}
+          image: {{ index .Values "rancherTurtles" "kubectlImage" }}
          args:
          - delete
-          {{- if eq (index .Values "rancherTurtles" "features" "managementv3-cluster" "enabled") true }}
          - clusters.provisioning.cattle.io
-          {{- else }}
-          - clusters.management.cattle.io
-          {{- end }}
          - --selector=cluster-api.cattle.io/owned
          - -A
          - --ignore-not-found=true
          - --wait
      restartPolicy: OnFailure
-{{- end }}
--- a/rancher-turtles-chart/templates/pre-delete-job.yaml
+++ b/rancher-turtles-chart/templates/pre-delete-job.yaml
@ -1,10 +1,10 @@
-{{- if index .Values "rancherTurtles" "features" "rancher-webhook" "cleanup" }}
+{{- if index .Values "rancherTurtles" "rancherInstalled" }}
 ---
 apiVersion: v1
 kind: ServiceAccount
 metadata:
  name: pre-delete-job
-  namespace: rancher-turtles-system
+  namespace: '{{ .Values.rancherTurtles.namespace }}'
  annotations:
    "helm.sh/hook": pre-delete
    "helm.sh/hook-weight": "-2"
@ -35,7 +35,7 @@ metadata:
 subjects:
  - kind: ServiceAccount
    name: pre-delete-job
-    namespace: rancher-turtles-system
+    namespace: '{{ .Values.rancherTurtles.namespace }}'
 roleRef:
  kind: ClusterRole
  name: pre-delete-job-delete-capiproviders
@ -45,7 +45,7 @@ apiVersion: batch/v1
 kind: Job
 metadata:
  name: rancher-capiprovider-cleanup
-  namespace: rancher-turtles-system
+  namespace: '{{ .Values.rancherTurtles.namespace }}'
  annotations:
    "helm.sh/hook": pre-delete
    "helm.sh/hook-weight": "-1"
@ -56,7 +56,7 @@ spec:
      serviceAccountName: pre-delete-job
      containers:
        - name: rancher-capiprovider-cleanup
-          image: {{ index .Values "rancherTurtles" "features" "rancher-webhook" "kubectlImage" }}
+          image: {{ index .Values "rancherTurtles" "kubectlImage" }}
          args:
          - delete
          - capiproviders
--- a/rancher-turtles-chart/templates/pre-install-job.yaml
+++ b/rancher-turtles-chart/templates/pre-install-job.yaml
@ -1,4 +1,3 @@
-{{- if index .Values "rancherTurtles" "features" "embedded-capi" "disabled" }}
 {{- if index .Values "rancherTurtles" "rancherInstalled"}}
 ---
 apiVersion: management.cattle.io/v3
@ -11,14 +10,13 @@ metadata:
 spec:
  value: false
 {{- end }}
-{{- end }}
-{{- if index .Values "rancherTurtles" "features" "rancher-webhook" "cleanup" }}
+{{- if index .Values "rancherTurtles" "rancherInstalled" }}
 ---
 apiVersion: v1
 kind: ServiceAccount
 metadata:
  name: pre-install-job
-  namespace: rancher-turtles-system
+  namespace: '{{ .Values.rancherTurtles.namespace }}'
  annotations:
    "helm.sh/hook": pre-install
    "helm.sh/hook-weight": "1"
@ -49,7 +47,7 @@ metadata:
 subjects:
  - kind: ServiceAccount
    name: pre-install-job
-    namespace: rancher-turtles-system
+    namespace: '{{ .Values.rancherTurtles.namespace }}'
 roleRef:
  kind: ClusterRole
  name: pre-install-job-delete-webhooks
@ -59,6 +57,7 @@ apiVersion: batch/v1
 kind: Job
 metadata:
  name: rancher-mutatingwebhook-cleanup
+  namespace: '{{ .Values.rancherTurtles.namespace }}'
  annotations:
    "helm.sh/hook": pre-install
    "helm.sh/hook-weight": "2"
@ -69,7 +68,7 @@ spec:
      serviceAccountName: pre-install-job
      containers:
        - name: rancher-mutatingwebhook-cleanup
-          image: {{ index .Values "rancherTurtles" "features" "rancher-webhook" "kubectlImage" }}
+          image: {{ index .Values "rancherTurtles" "kubectlImage" }}
          args:
          - delete
          - mutatingwebhookconfigurations.admissionregistration.k8s.io
@ -81,6 +80,7 @@ apiVersion: batch/v1
 kind: Job
 metadata:
  name: rancher-validatingwebhook-cleanup
+  namespace: '{{ .Values.rancherTurtles.namespace }}'
  annotations:
    "helm.sh/hook": pre-install
    "helm.sh/hook-weight": "2"
@ -91,7 +91,7 @@ spec:
      serviceAccountName: pre-install-job
      containers:
        - name: rancher-validatingwebhook-cleanup
-          image: {{ index .Values "rancherTurtles" "features" "rancher-webhook" "kubectlImage" }}
+          image: {{ index .Values "rancherTurtles" "kubectlImage" }}
          args:
          - delete
          - validatingwebhookconfigurations.admissionregistration.k8s.io
--- a/rancher-turtles-chart/templates/rancher-turtles-components.yaml
+++ b/rancher-turtles-chart/templates/rancher-turtles-components.yaml
--- a/rancher-turtles-chart/templates/rancher-turtles-exp-etcdrestore-components.yaml
+++ b/rancher-turtles-chart/templates/rancher-turtles-exp-etcdrestore-components.yaml
@ -4,7 +4,7 @@ kind: CustomResourceDefinition
 metadata:
  annotations:
    cert-manager.io/inject-ca-from: {{ index .Values "rancherTurtles" "namespace" }}/rancher-turtles-etcdsnapshotrestore-serving-cert
-    controller-gen.kubebuilder.io/version: v0.14.0
+    controller-gen.kubebuilder.io/version: v0.16.1
  labels:
    turtles-capi.cattle.io: etcd-restore
  name: etcdmachinesnapshots.turtles-capi.cattle.io
@ -116,7 +116,7 @@ kind: CustomResourceDefinition
 metadata:
  annotations:
    cert-manager.io/inject-ca-from: {{ index .Values "rancherTurtles" "namespace" }}/rancher-turtles-etcdsnapshotrestore-serving-cert
-    controller-gen.kubebuilder.io/version: v0.14.0
+    controller-gen.kubebuilder.io/version: v0.16.1
  labels:
    turtles-capi.cattle.io: etcd-restore
  name: etcdsnapshotrestores.turtles-capi.cattle.io
@ -195,20 +195,20 @@ spec:
                      description: |-
                        The reason for the condition's last transition in CamelCase.
                        The specific API may choose whether or not this field is considered a guaranteed API.
-                        This field may not be empty.
+                        This field may be empty.
                      type: string
                    severity:
                      description: |-
-                        Severity provides an explicit classification of Reason code, so the users or machines can immediately
+                        severity provides an explicit classification of Reason code, so the users or machines can immediately
                        understand the current situation and act accordingly.
                        The Severity field MUST be set only when Status=False.
                      type: string
                    status:
-                      description: Status of the condition, one of True, False, Unknown.
+                      description: status of the condition, one of True, False, Unknown.
                      type: string
                    type:
                      description: |-
-                        Type of condition in CamelCase or in foo.example.com/CamelCase.
+                        type of condition in CamelCase or in foo.example.com/CamelCase.
                        Many .condition.type values are consistent across resources like Available, but because arbitrary conditions
                        can be useful (see .node.status.conditions), the ability to deconflict is important.
                      type: string
@ -235,7 +235,7 @@ kind: CustomResourceDefinition
 metadata:
  annotations:
    cert-manager.io/inject-ca-from: {{ index .Values "rancherTurtles" "namespace" }}/rancher-turtles-etcdsnapshotrestore-serving-cert
-    controller-gen.kubebuilder.io/version: v0.14.0
+    controller-gen.kubebuilder.io/version: v0.16.1
  labels:
    turtles-capi.cattle.io: etcd-restore
  name: rke2etcdmachinesnapshotconfigs.turtles-capi.cattle.io
@ -438,29 +438,7 @@ rules:
  - cluster.x-k8s.io
  resources:
  - clusters
-  verbs:
-  - create
-  - delete
-  - get
-  - list
-  - patch
-  - update
-  - watch
- apiGroups:
-  - cluster.x-k8s.io
-  resources:
  - clusters/status
-  verbs:
-  - create
-  - delete
-  - get
-  - list
-  - patch
-  - update
-  - watch
- apiGroups:
-  - cluster.x-k8s.io
-  resources:
  - machines
  verbs:
  - create
@ -499,57 +477,7 @@ rules:
  - turtles-capi.cattle.io
  resources:
  - etcdmachinesnapshots
-  verbs:
-  - create
-  - delete
-  - get
-  - list
-  - patch
-  - update
-  - watch
- apiGroups:
-  - turtles-capi.cattle.io
-  resources:
-  - etcdmachinesnapshots/finalizers
-  verbs:
-  - update
- apiGroups:
-  - turtles-capi.cattle.io
-  resources:
-  - etcdmachinesnapshots/status
-  verbs:
-  - get
-  - patch
-  - update
- apiGroups:
-  - turtles-capi.cattle.io
-  resources:
  - etcdsnapshotrestores
-  verbs:
-  - create
-  - delete
-  - get
-  - list
-  - patch
-  - update
-  - watch
- apiGroups:
-  - turtles-capi.cattle.io
-  resources:
-  - etcdsnapshotrestores/finalizers
-  verbs:
-  - update
- apiGroups:
-  - turtles-capi.cattle.io
-  resources:
-  - etcdsnapshotrestores/status
-  verbs:
-  - get
-  - patch
-  - update
- apiGroups:
-  - turtles-capi.cattle.io
-  resources:
  - rke2etcdmachinesnapshotconfigs
  verbs:
  - create
@ -562,12 +490,16 @@ rules:
 - apiGroups:
  - turtles-capi.cattle.io
  resources:
+  - etcdmachinesnapshots/finalizers
+  - etcdsnapshotrestores/finalizers
  - rke2etcdmachinesnapshotconfigs/finalizers
  verbs:
  - update
 - apiGroups:
  - turtles-capi.cattle.io
  resources:
+  - etcdmachinesnapshots/status
+  - etcdsnapshotrestores/status
  - rke2etcdmachinesnapshotconfigs/status
  verbs:
  - get
--- a/rancher-turtles-chart/values.yaml
+++ b/rancher-turtles-chart/values.yaml
@ -1,35 +1,24 @@
 rancherTurtles:
  image: registry.rancher.com/rancher/rancher/turtles
-  imageVersion: v0.14.1
+  imageVersion: v0.16.0
  imagePullPolicy: IfNotPresent
  namespace: rancher-turtles-system
  managerArguments: []
  imagePullSecrets: []
-  rancherInstalled: true
+  rancherInstalled: false
+  kubectlImage: registry.suse.com/edge/3.2/kubectl:1.30.3
  features:
-    cluster-api-operator:
-      cleanup: true
-      kubectlImage: rancher/kubectl:v1.30.3
-    embedded-capi:
-      disabled: false
-    rancher-webhook:
-      cleanup: false
-      kubectlImage: rancher/kubectl:v1.30.3
-    rancher-kubeconfigs:
-      label: false
-    managementv3-cluster:
-      enabled: true
-    managementv3-cluster-migration:
-      enabled: false
-    propagate-labels:
-      enabled: false
    etcd-snapshot-restore:
      enabled: false
      image: registry.rancher.com/rancher/rancher/turtles
-      imageVersion: v0.14.1
+      imageVersion: v0.16.0
      imagePullPolicy: IfNotPresent
+    # beta feature, see documentation for more information on feature stages
    addon-provider-fleet:
      enabled: false
+    # alpha feature, see documentation for more information on feature stages
+    agent-tls-mode:
+      enabled: false
 cluster-api-operator:
  enabled: true
  cert-manager:
@ -53,6 +42,7 @@ cluster-api-operator:
      - mountPath: /config
        name: clusterctl-config
        readOnly: true
+  cleanup: true
  cluster-api:
    enabled: true
    configSecret:
@ -60,30 +50,34 @@ cluster-api-operator:
      defaultName: capi-env-variables
    core:
      namespace: capi-system
+      imageUrl: ""
      fetchConfig:
        url: ""
        selector: ""
    rke2:
      enabled: true
+      version: ""
      bootstrap:
        namespace: rke2-bootstrap-system
+        imageUrl: ""
        fetchConfig:
          url: ""
          selector: ""
      controlPlane:
        namespace: rke2-control-plane-system
+        imageUrl: ""
        fetchConfig:
          url: ""
          selector: ""
    metal3:
      enabled: true
-      version: "v1.8.2"
+      version: "v1.9.2"
      infrastructure:
        namespace: capm3-system
-        imageUrl: "registry.rancher.com/rancher/cluster-api-metal3-controller:v1.8.2"
+        imageUrl: "registry.suse.com/rancher/cluster-api-provider-metal3:v1.9.2"
        fetchConfig:
          url: ""
          selector: ""
      ipam:
        namespace: capm3-system
-        imageUrl: "registry.rancher.com/rancher/cluster-api-metal3-ipam-controller:v1.8.1"
+        imageUrl: "registry.suse.com/rancher/ip-address-manager:v1.9.3"