{{- if index .Values "rancherTurtles" "features" "embedded-capi" "disabled" }}
---
apiVersion: management.cattle.io/v3
kind: Feature
metadata:
  name: embedded-cluster-api
  annotations:
    "helm.sh/hook": pre-install
    "helm.sh/hook-weight": "1"
spec:
  value: false
{{- end }}
{{- if index .Values "rancherTurtles" "features" "rancher-webhook" "cleanup" }}
---
apiVersion: v1
kind: ServiceAccount
metadata:
  name: pre-install-job
  namespace: rancher-turtles-system
  annotations:
    "helm.sh/hook": pre-install
    "helm.sh/hook-weight": "1"
---
apiVersion: rbac.authorization.k8s.io/v1
kind: ClusterRole
metadata:
  name: pre-install-job-delete-webhooks
  annotations:
    "helm.sh/hook": pre-install
    "helm.sh/hook-weight": "1"
rules:
- apiGroups:
  - admissionregistration.k8s.io
  resources:
  - validatingwebhookconfigurations
  - mutatingwebhookconfigurations
  verbs:
  - delete
---
apiVersion: rbac.authorization.k8s.io/v1
kind: ClusterRoleBinding
metadata:
  name: pre-install-job-webhook-cleanup
  annotations:
    "helm.sh/hook": pre-install
    "helm.sh/hook-weight": "1"
subjects:
  - kind: ServiceAccount
    name: pre-install-job
    namespace: rancher-turtles-system
roleRef:
  kind: ClusterRole
  name: pre-install-job-delete-webhooks
  apiGroup: rbac.authorization.k8s.io
---
apiVersion: batch/v1
kind: Job
metadata:
  name: rancher-mutatingwebhook-cleanup
  annotations:
    "helm.sh/hook": pre-install
    "helm.sh/hook-weight": "2"
spec:
  ttlSecondsAfterFinished: 300
  template:
    spec:
      serviceAccountName: pre-install-job
      containers:
        - name: rancher-mutatingwebhook-cleanup
          image: {{ index .Values "rancherTurtles" "features" "rancher-webhook" "kubectlImage" }}
          args:
          - delete
          - mutatingwebhookconfigurations.admissionregistration.k8s.io
          - mutating-webhook-configuration
          - --ignore-not-found=true
      restartPolicy: Never
---
apiVersion: batch/v1
kind: Job
metadata:
  name: rancher-validatingwebhook-cleanup
  annotations:
    "helm.sh/hook": pre-install
    "helm.sh/hook-weight": "2"
spec:
  ttlSecondsAfterFinished: 300
  template:
    spec:
      serviceAccountName: pre-install-job
      containers:
        - name: rancher-validatingwebhook-cleanup
          image: {{ index .Values "rancherTurtles" "features" "rancher-webhook" "kubectlImage" }}
          args:
          - delete
          - validatingwebhookconfigurations.admissionregistration.k8s.io
          - validating-webhook-configuration
          - --ignore-not-found=true
      restartPolicy: Never
{{- end }}