Update release version to 1.15.0 in charts (#2267 )

Signed-off-by: Sanket Sudake <sanketsudake@gmail.com>
Update alpine base image to 3.14.3 and security fixes (#2266 )
2021-11-23 13:26:28 +05:30 · 2021-11-23 10:10:07 +05:30 · 2021-11-16 12:51:08 +05:30 · 2021-11-12 16:56:57 +05:30 · 2021-11-11 19:23:55 +05:30 · 2021-11-11 17:02:11 +05:30
200 changed files with 4278 additions and 4077 deletions
@@ -9,8 +9,8 @@ assignees: ''

 <!-- Please answer these questions before submitting your issue. Thanks! -->

-<!-- Documentation URL: https://docs.fission.io/ -->
-<!-- Troubleshooting guide: https://docs.fission.io/trouble-shooting/ -->
+<!-- Documentation URL: https://fission.io/docs -->
+<!-- Troubleshooting guide: https://fission.io/docs/trouble-shooting/ -->

 **Fission/Kubernetes version**

@@ -0,0 +1,23 @@
+<!--  Thanks for sending a pull request! We request you provide detailed description as much as possible. -->
+
+## Description
+<!--- Describe your changes in detail. -->
+<!-- Typically try to give details of what, why and how of the PR changes. -->
+
+## Which issue(s) this PR fixes:
+<!--
+*Automatically closes linked issue when PR is merged.
+Usage: `Fixes #<issue number>`, or `Fixes (paste link of issue)`.
+-->
+Fixes #
+
+## Testing
+<!--- Please describe in detail how you tested your changes. -->
+
+## Checklist:
+<!-- Please tick following checkboxes as per your understanding. -->
+- [ ] I ran tests as well as code linting locally to verify my changes. 
+- [ ] I have done manual verification of my changes, changes working as expected.
+- [ ] I have added new tests to cover my changes.
+- [ ] My changes follow contributing guidelines of Fission.
+- [ ] I have signed all of my commits.
@@ -68,4 +68,11 @@ jobs:
          exit $STATUS

      - name: Run unit tests
-        run: ./hack/runtests.sh
+        run: ./hack/runtests.sh
+
+      - name: Upload Coverage report to CodeCov
+        uses: codecov/codecov-action@v2
+        with:
+          token: ${{secrets.CODECOV_TOKEN}}
+          flags: unittests
+          file: ./coverage.txt
@@ -5,18 +5,18 @@ on:
    branches:
      - master
    paths:
-      - '**.go'
-      - 'charts/**'
-      - 'test/**'
+      - "**.go"
+      - "charts/**"
+      - "test/**"
      - go.mod
      - go.sum
  pull_request:
    branches:
      - master
    paths:
-      - '**.go'
-      - 'charts/**'
-      - 'test/**'
+      - "**.go"
+      - "charts/**"
+      - "test/**"
      - go.mod
      - go.sum
  workflow_dispatch:
@@ -28,8 +28,8 @@ jobs:
    strategy:
      fail-fast: false
      matrix:
-        kindimage : [ 'kindest/node:v1.19.11','kindest/node:v1.20.7',  'kindest/node:v1.21.1' ]
-        os: [ ubuntu-latest ] 
+        kindversion: ["v1.19.11", "v1.20.7", "v1.21.1"]
+        os: [ubuntu-latest]
    steps:
      - name: setup go
        uses: actions/setup-go@v2
@@ -60,8 +60,8 @@ jobs:
      - name: Kind Clutser
        uses: engineerd/setup-kind@v0.5.0
        with:
-          image:  ${{ matrix.kindimage }}
-          version:  v0.11.1
+          image: kindest/node:${{ matrix.kindversion }}
+          version: v0.11.1
          config: kind.yaml

      - name: Configuring and testing the Installation
@@ -72,7 +72,7 @@ jobs:

      - name: Helm chart lint
        run: |
-          helm lint charts/fission-all/ charts/fission-core/
+          helm lint charts/fission-all/

      - name: Helm update
        run: helm repo add prometheus-community https://prometheus-community.github.io/helm-charts
@@ -118,10 +118,23 @@ jobs:
        run: |
          command -v fission && fission support dump

+      - name: Kind export logs
+        if: ${{ always() }}
+        run: |
+          kind export logs --name kind kind-logs
+
      - name: Archive fission dump
        if: ${{ failure() }}
        uses: actions/upload-artifact@v2
        with:
-          name: fission-dump
+          name: fission-dump-${{ github.run_id }}-${{ matrix.kindversion }}
          path: fission-dump/*.zip
-          retention-days: 5
+          retention-days: 5
+
+      - name: Archive kind logs
+        if: ${{ always() }}
+        uses: actions/upload-artifact@v2
+        with:
+          name: kind-logs-${{ github.run_id }}-${{ matrix.kindversion }}
+          path: kind-logs/*
+          retention-days: 5
@@ -6,8 +6,8 @@ release:
  prerelease: true
  draft: true
  header: |
-    Release Highlights: https://docs.fission.io/docs/releases/{{ .Tag }}/
-    Install Guide: https://docs.fission.io/installation/
+    Release Highlights: https://fission.io/docs/releases/{{ .Tag }}/
+    Install Guide: https://fission.io/docs/installation/
    Full Changelog: https://github.com/fission/fission/blob/master/CHANGELOG.md
  extra_files:
    - glob: ./manifest/charts/*
@@ -232,6 +232,31 @@ docker_manifests:
      - fission/reporter:{{ .Tag }}-amd64
      - fission/reporter:{{ .Tag }}-arm64
      - fission/reporter:{{ .Tag }}-armv7
+  - name_template: fission/builder:latest
+    image_templates:
+      - fission/builder:latest-amd64
+      - fission/builder:latest-arm64
+      - fission/builder:latest-armv7
+  - name_template: fission/fetcher:latest
+    image_templates:
+      - fission/fetcher:latest-amd64
+      - fission/fetcher:latest-arm64
+      - fission/fetcher:latest-armv7
+  - name_template: fission/fission-bundle:latest
+    image_templates:
+      - fission/fission-bundle:latest-amd64
+      - fission/fission-bundle:latest-arm64
+      - fission/fission-bundle:latest-armv7
+  - name_template: fission/pre-upgrade-checks:latest
+    image_templates:
+      - fission/pre-upgrade-checks:latest-amd64
+      - fission/pre-upgrade-checks:latest-arm64
+      - fission/pre-upgrade-checks:latest-armv7
+  - name_template: fission/reporter:latest
+    image_templates:
+      - fission/reporter:latest-amd64
+      - fission/reporter:latest-arm64
+      - fission/reporter:latest-armv7
 changelog:
  skip: true
 archives:
@@ -1,14 +1,85 @@
 # Changelog

+## [v1.15.0-rc2](https://github.com/fission/fission/tree/v1.15.0-rc2) (2021-11-11)
+
+[Full Changelog](https://github.com/fission/fission/compare/v1.15.0-rc1...v1.15.0-rc2)
+
+**Merged pull requests:**
+
+- Capture os signals to gracefully shutdown fission components [\#2261](https://github.com/fission/fission/pull/2261) ([sanketsudake](https://github.com/sanketsudake))
+- Capture fission-bundle exit logs with sync [\#2260](https://github.com/fission/fission/pull/2260) ([sanketsudake](https://github.com/sanketsudake))
+- Issue \#2258 Reafctor ready pod conroller to use lister and cache sync checks [\#2259](https://github.com/fission/fission/pull/2259) ([sanketsudake](https://github.com/sanketsudake))
+- Remove heapster from fission chart [\#2256](https://github.com/fission/fission/pull/2256) ([sanketsudake](https://github.com/sanketsudake))
+- Add termination policy customization in helm chart  [\#2255](https://github.com/fission/fission/pull/2255) ([sanketsudake](https://github.com/sanketsudake))
+- Add support to mention priorityClassName for Fission components [\#2254](https://github.com/fission/fission/pull/2254) ([sanketsudake](https://github.com/sanketsudake))
+- Export kind logs from CI for pod restart debugging [\#2252](https://github.com/fission/fission/pull/2252) ([sanketsudake](https://github.com/sanketsudake))
+- Run all generators with upstream 1.22 code-generator [\#2251](https://github.com/fission/fission/pull/2251) ([sanketsudake](https://github.com/sanketsudake))
+- Upgrade all dependencies [\#2250](https://github.com/fission/fission/pull/2250) ([sanketsudake](https://github.com/sanketsudake))
+- Add 1.15.x upgrade notes in chart README [\#2249](https://github.com/fission/fission/pull/2249) ([sanketsudake](https://github.com/sanketsudake))
+- Add command to generate Fission CLI docs [\#2247](https://github.com/fission/fission/pull/2247) ([sanketsudake](https://github.com/sanketsudake))
+- Changed kafka version to v0.9 [\#2246](https://github.com/fission/fission/pull/2246) ([blackfly19](https://github.com/blackfly19))
+- Pass context to functionCache functions and debug messages in pool cache [\#2244](https://github.com/fission/fission/pull/2244) ([sanketsudake](https://github.com/sanketsudake))
+- Update chart version to v1.15.0-rc2 [\#2243](https://github.com/fission/fission/pull/2243) ([sanketsudake](https://github.com/sanketsudake))
+- Disable nats test as we deprecate Fission Nats Integration [\#2241](https://github.com/fission/fission/pull/2241) ([sanketsudake](https://github.com/sanketsudake))
+- feature: Added '--specignore' option to pass file containing specs to be ignored for fission spec \[list | validate | apply | destroy\] command [\#2239](https://github.com/fission/fission/pull/2239) ([praddy26](https://github.com/praddy26))
+- refactor: move from io/ioutil to io and os package [\#2236](https://github.com/fission/fission/pull/2236) ([Juneezee](https://github.com/Juneezee))
+- Improve fission-all helm chart values documentation [\#2235](https://github.com/fission/fission/pull/2235) ([sanketsudake](https://github.com/sanketsudake))
+- Add NATS streaming image tag [\#2234](https://github.com/fission/fission/pull/2234) ([arbourd](https://github.com/arbourd))
+- Remove admin role from fission-svc service account [\#2233](https://github.com/fission/fission/pull/2233) ([sanketsudake](https://github.com/sanketsudake))
+- Remove Fission UI manifest from chart [\#2232](https://github.com/fission/fission/pull/2232) ([sanketsudake](https://github.com/sanketsudake))
+- Adding validations for env/fn before listing pods [\#2231](https://github.com/fission/fission/pull/2231) ([praddy26](https://github.com/praddy26))
+- Allow disabling preupgrade checks [\#2229](https://github.com/fission/fission/pull/2229) ([sanketsudake](https://github.com/sanketsudake))
+- security: Chart dependency update: prometheus, fluentd, influxdb [\#2227](https://github.com/fission/fission/pull/2227) ([sanketsudake](https://github.com/sanketsudake))
+- Improve namespace checks in pre-upgrade verification [\#2226](https://github.com/fission/fission/pull/2226) ([sanketsudake](https://github.com/sanketsudake))
+- refactoring: Breakdown fission-all chart into components [\#2224](https://github.com/fission/fission/pull/2224) ([sanketsudake](https://github.com/sanketsudake))
+- Add security policy [\#2217](https://github.com/fission/fission/pull/2217) ([sanketsudake](https://github.com/sanketsudake))
+- security: Update go-uuid and mholt/archiver to recommended version [\#2216](https://github.com/fission/fission/pull/2216) ([sanketsudake](https://github.com/sanketsudake))
+- refactor: Replaced context.TODO\(\) with request.Context\(\) in API files [\#2214](https://github.com/fission/fission/pull/2214) ([praddy26](https://github.com/praddy26))
+- feature: Added command to list pods managed by fission for environment/function [\#2207](https://github.com/fission/fission/pull/2207) ([praddy26](https://github.com/praddy26))
+
+## [v1.15.0-rc1](https://github.com/fission/fission/tree/v1.15.0-rc1) (2021-09-23)
+
+[Full Changelog](https://github.com/fission/fission/compare/1.14.1...v1.15.0-rc1)
+
+**Implemented enhancements:**
+
+- Fission meets OpenTelemetry [\#2157](https://github.com/fission/fission/pull/2157) ([gauravgahlot](https://github.com/gauravgahlot))
+
+**Merged pull requests:**
+
+- enhancement: Add different samplers and propagators support with OpenTelemetry [\#2201](https://github.com/fission/fission/pull/2201) ([sanketsudake](https://github.com/sanketsudake))
+- chore\(dep\): update go dependency stow v0.2.7 [\#2195](https://github.com/fission/fission/pull/2195) ([sanketsudake](https://github.com/sanketsudake))
+- fix: Use standard env variables for opentelemtry [\#2194](https://github.com/fission/fission/pull/2194) ([sanketsudake](https://github.com/sanketsudake))
+- fix: Goreleaser for build and release [\#2189](https://github.com/fission/fission/pull/2189) ([sanketsudake](https://github.com/sanketsudake))
+- fix: Updated nats connector version to v0.9 [\#2186](https://github.com/fission/fission/pull/2186) ([blackfly19](https://github.com/blackfly19))
+- Updated versions of connectors [\#2185](https://github.com/fission/fission/pull/2185) ([blackfly19](https://github.com/blackfly19))
+- Pass podinformer to poolpodcontroller instead of reference to pool manager [\#2184](https://github.com/fission/fission/pull/2184) ([sanketsudake](https://github.com/sanketsudake))
+- Check package resource version from fetch request with fetched package [\#2183](https://github.com/fission/fission/pull/2183) ([sanketsudake](https://github.com/sanketsudake))
+- Functions with common prefix path handling with internal routes [\#2182](https://github.com/fission/fission/pull/2182) ([sanketsudake](https://github.com/sanketsudake))
+- feature: Capture important events with span in fission and add trace id in logs [\#2180](https://github.com/fission/fission/pull/2180) ([sanketsudake](https://github.com/sanketsudake))
+- Add kubernetes objects aware logger with zap [\#2179](https://github.com/fission/fission/pull/2179) ([sanketsudake](https://github.com/sanketsudake))
+- Fix pod name in port forwarding log [\#2178](https://github.com/fission/fission/pull/2178) ([sanketsudake](https://github.com/sanketsudake))
+- Added redis keda connector [\#2176](https://github.com/fission/fission/pull/2176) ([blackfly19](https://github.com/blackfly19))
+- Add correct context required in executor [\#2175](https://github.com/fission/fission/pull/2175) ([sanketsudake](https://github.com/sanketsudake))
+- Add typed informers instead of generic SharedIndexInformers [\#2174](https://github.com/fission/fission/pull/2174) ([sanketsudake](https://github.com/sanketsudake))
+- Add context for traces in executor [\#2172](https://github.com/fission/fission/pull/2172) ([gauravgahlot](https://github.com/gauravgahlot))
+- Added labels to flags '--url', '--prefix', '--method' to reflect thei… [\#2171](https://github.com/fission/fission/pull/2171) ([nickmancari](https://github.com/nickmancari))
+- Change default function timeout [\#2169](https://github.com/fission/fission/pull/2169) ([gauravgahlot](https://github.com/gauravgahlot))
+- Update go version to 1.16 and kubernetes dev dependencies to 1.21 [\#2168](https://github.com/fission/fission/pull/2168) ([sanketsudake](https://github.com/sanketsudake))
+- Change default informer resync period to 30 minutes [\#2167](https://github.com/fission/fission/pull/2167) ([sanketsudake](https://github.com/sanketsudake))
+- Organize pool manager code and few improvements [\#2166](https://github.com/fission/fission/pull/2166) ([sanketsudake](https://github.com/sanketsudake))
+- Consider newdeploy functions only for env update in newdeploy manager [\#2165](https://github.com/fission/fission/pull/2165) ([sanketsudake](https://github.com/sanketsudake))
+- fix: Add pathType to create networking/v1 ingress [\#2164](https://github.com/fission/fission/pull/2164) ([chenjr0719](https://github.com/chenjr0719))
+- Use pool pod controller with env informer  [\#2161](https://github.com/fission/fission/pull/2161) ([sanketsudake](https://github.com/sanketsudake))
+- Update alpine base image to 3.14 [\#2160](https://github.com/fission/fission/pull/2160) ([sanketsudake](https://github.com/sanketsudake))
+
 ## [1.14.1](https://github.com/fission/fission/tree/1.14.1) (2021-08-03)

 [Full Changelog](https://github.com/fission/fission/compare/1.14.0...1.14.1)

 **Merged pull requests:**

- Update chart version to 1.14.1 [\#2143](https://github.com/fission/fission/pull/2143) ([sanketsudake](https://github.com/sanketsudake))
 - Fixed service name generation for function name \< 17 chars [\#2142](https://github.com/fission/fission/pull/2142) ([sanketsudake](https://github.com/sanketsudake))
- Update changelog for 1.14.0 [\#2138](https://github.com/fission/fission/pull/2138) ([sanketsudake](https://github.com/sanketsudake))

 ## [1.14.0](https://github.com/fission/fission/tree/1.14.0) (2021-08-02)

@@ -7,4 +7,4 @@ First, please read the [code of conduct](CODE_OF_CONDUCT.md). By participating,

 Please refer contributing docs for detailed guide.

-[https://docs.fission.io/docs/contributing/](https://docs.fission.io/docs/contributing/)
+[https://fission.io/docs/contributing/](https://fission.io/docs/contributing/)
@@ -1,4 +1,4 @@
 Fission Document
 =================

-* Please visit [here](https://docs.fission.io/) for fission documentation. 
+* Please visit [here](https://fission.io/docs) for fission documentation.
@@ -79,6 +79,9 @@ clean:
 generate-swagger-doc:
 	@./hack/update-swagger-docs.sh

+generate-cli-docs:
+	go run tools/cmd-docs/main.go -o "../fission.io/content/en/docs/fission-cli"
+
 all-generators: codegen generate-crds generate-swagger-doc

 skaffold-prebuild:
@@ -1,21 +1,41 @@
 <p align="center">
-  <img src="https://docs.fission.io/images/logo-gh.svg" width="300" />
+  <img src="https://fission.io/images/logo-gh.svg" width="300" />
  <br>
  <h1 align="center">Fission: Serverless Functions for Kubernetes</h1>
 </p>
+
 <p align="center">
-  <a href="https://github.com/fission/fission/actions?query=workflow%3A%22Fission+CI%22">
-    <img src="https://github.com/fission/fission/workflows/Fission%20CI/badge.svg?branch=master" alt="Build Status" />
+  <a href="https://github.com/fission/fission/blob/master/LICENSE">
+    <img alt="Fission Licence" src="https://img.shields.io/github/license/fission/fission">
+  </a>
+  <a href="https://github.com/fission/fission/releases">
+    <img alt="Fission Releases" src="https://img.shields.io/github/release-pre/fission/fission.svg">
+  </a>
+  <a href="https://pkg.go.dev/github.com/fission/fission">
+    <img alt="go.dev reference" src="https://img.shields.io/badge/go.dev-reference-007d9c?logo=go&logoColor=white">
  </a>
-  
  <a href="https://goreportcard.com/report/github.com/fission/fission">
    <img src="https://goreportcard.com/badge/github.com/fission/fission" alt="Go Report Card" />
  </a>
-  <a href="https://codecov.io/gh/fission/fission">
-    <img src="https://codecov.io/gh/fission/fission/branch/master/graph/badge.svg" alt="codecov" />
+  <a href="https://github.com/fission/fission/graphs/contributors">
+    <img alt="Fission contributors" src="https://img.shields.io/github/contributors/fission/fission">
+  </a>
+  <a href="https://github.com/fission/fission/commits/master">
+    <img alt="Commit Activity" src="https://img.shields.io/github/commit-activity/m/fission/fission">
  </a>
  <br>
-  <a href="http://fission.io">fission.io</a> | <a href="http://twitter.com/fissionio">@fissionio</a> | <a href="https://join.slack.com/t/fissionio/shared_invite/enQtOTI3NjgyMjE5NzE3LTllODJiODBmYTBiYWUwMWQxZWRhNDhiZDMyN2EyNjAzMTFiYjE2Nzc1NzE0MTU4ZTg2MzVjMDQ1NWY3MGJhZmE">Slack</a>
+  <a href="https://fission.io/">
+    <img alt="Fission website" src="https://img.shields.io/badge/website-fission.io-blue">
+  </a>
+  <a href="https://fission.io/slack">
+    <img alt="Fission slack" src="https://badgen.net/badge/slack/Fission?icon=slack">
+  </a>
+  <a href="https://twitter.com/fissionio">
+    <img alt="Fission twitter" src="https://img.shields.io/twitter/follow/fissionio?style=social">
+  </a>
+  <a href="https://github.com/fission/fission">
+    <img alt="GitHub Repo stars" src="https://img.shields.io/github/stars/fission/fission?style=social">
+  </a>
 </p>

 --------------
@@ -34,17 +54,14 @@ PHP, Bash, and any Linux executable, with more languages coming soon.

 Table of Contents
 =================
-
-   * [Fission: Serverless Functions for Kubernetes](#fission-serverless-functions-for-kubernetes)
-      * [Performance: 100msec cold start](#performance-100msec-cold-start)
-      * [Kubernetes is the right place for Serverless](#kubernetes-is-the-right-place-for-serverless)
-      * [Getting Started](#getting-started)
-      * [Learn More](#learn-more)
-      * [Contributing](#contributing)
-      * [Get Help &amp; Community Meeting](#get-help--community-meeting)
-      * [Official Releases](#official-releases)
-      * [Sponsors](#sponsors)
-   * [Licensing](#licensing)
+- [Table of Contents](#table-of-contents)
+  - [Performance: 100msec cold start](#performance-100msec-cold-start)
+  - [Kubernetes is the right place for Serverless](#kubernetes-is-the-right-place-for-serverless)
+  - [Getting Started](#getting-started)
+  - [Learn More](#learn-more)
+  - [Contributing](#contributing)
+  - [Sponsors](#sponsors)
+- [License](#license)

 ## Performance: 100msec cold start

@@ -81,44 +98,27 @@ aggregation &mdash; also helps with ops on your Fission deployment.

 ## Learn More

-* Understand [Fission Concepts](https://docs.fission.io/docs/concepts/).
-* See the [installation guide](https://docs.fission.io/docs/installation/) for installing and running Fission.
-* You can learn more about Fission and get started from [Fission Docs](https://docs.fission.io/docs).
-* See the [troubleshooting guide](https://docs.fission.io/docs/trouble-shooting/) for debugging your functions and Fission installation.
+- Understand [Fission Concepts](https://fission.io/docs/concepts/).
+- See the [installation guide](https://fission.io/docs/installation/) for installing and running Fission.
+- You can learn more about Fission and get started from [Fission Docs](https://fission.io/docs).
+- See the [troubleshooting guide](https://fission.io/docs/trouble-shooting/) for debugging your functions and Fission installation.

 ## Contributing

 Check out the [contributing guide](CONTRIBUTING.md).

-## Get Help & Community Meeting 
-
-Fission is a project by [many contributors](https://github.com/fission/fission/graphs/contributors).
-Reach us on [slack](https://join.slack.com/t/fissionio/shared_invite/enQtOTI3NjgyMjE5NzE3LTllODJiODBmYTBiYWUwMWQxZWRhNDhiZDMyN2EyNjAzMTFiYjE2Nzc1NzE0MTU4ZTg2MzVjMDQ1NWY3MGJhZmE) or [twitter](https://twitter.com/fissionio).
-
-A regular community meeting takes place every other Thursday at 09:00 AM PT (Pacific Time). [Convert to your local timezone](http://www.thetimezoneconverter.com/?t=09:00&tz=PT%20%28Pacific%20Time%29).
-
-Meeting Link: https://zoom.us/j/413921817 
-
-The meeting agenda for next meeting and notes from past meetings are maintained in [this document](https://docs.google.com/document/d/1E-xw4KJgka4sUpETHxr9BJBYntzrtxlAN_CE3Wt8kws). You are welcome to join to discuss direction of project, design and implementation reviews and general questions about project etc.
-
-## Official Releases
-
-Official releases of Fission can be found on [the releases page](https://github.com/fission/fission/releases). 
-Please note that it is strongly recommended that you use official releases of Fission, as unreleased versions from 
-the master branch are subject to changes and incompatibilities that will not be supported in the official releases. 
-
 ## Sponsors

 The following companies, organizations, and individuals support Fission's ongoing maintenance and development. If you are using/contributing to Fission, we would be happy to list you here, please raise a Pull request.

 <p>
-    <a href="https://infracloud.io/"><img src="https://fission.io/sponsors/infracloud.png" alt="InfraCloud" height="70"></a>
-    <a href="https://srcmesh.com/"><img src="https://fission.io/sponsors/srcmesh.png" alt="Srcmesh" height="70"></a>
-    <a href="https://www.digitalocean.com/?utm_medium=opensource&utm_source=fissionio">
-      <img src="https://opensource.nyc3.cdn.digitaloceanspaces.com/attribution/assets/PoweredByDO/DO_Powered_by_Badge_blue.svg" width="201px">
-    </a>
+  <a href="https://infracloud.io/"><img src="https://fission.io/sponsors/infracloud.png" alt="InfraCloud" height="70"></a>
+  <a href="https://srcmesh.com/"><img src="https://fission.io/sponsors/srcmesh.png" alt="Srcmesh" height="70"></a>
+  <a href="https://www.digitalocean.com/?utm_medium=opensource&utm_source=fissionio">
+    <img src="https://opensource.nyc3.cdn.digitaloceanspaces.com/attribution/assets/PoweredByDO/DO_Powered_by_Badge_blue.svg" width="201px">
+  </a>
 </p>

-# Licensing
+# License

-Fission is under the Apache 2.0 license.
+Fission is licensed under the Apache License 2.0 - see the [LICENSE](./LICENSE) file for details
@@ -0,0 +1,17 @@
+# Security Policy
+
+## Supported Versions
+
+Please refer using [latest stable release](https://github.com/fission/fission/releases/latest) of Fission. 
+
+| Version | Supported          |
+| ------- | ------------------ |
+| >=1.14.x   | :white_check_mark: |
+| < 1.14.0   | :x:                |
+
+## Reporting a Vulnerability
+
+Please send the details to both of us:
+
+- Sanket Sudake sanket@infracloud.io
+- Vishal Biyani vishal@infracloud.io
@@ -1,131 +0,0 @@
-# Fission
-
-[Fission](http://fission.io/) is a framework for serverless functions on Kubernetes.
-
-
-## Prerequisites
-
- Kubernetes 1.9 or later
-
-
-## Helm charts
-
-The following table lists two helm charts for Fission.
-
-| Parameter      | Description                                                                            |
-| ---------------| ---------------------------------------------------------------------------------------|
-| `fission-core` | FaaS essentials, and triggers for HTTP, Timers and Kubernetes Watches                  |
-| `fission-all`  | Log aggregation with fluentd and InfluxDB; NATS for message queue triggers; Fission-UI |
-
-## Installing the chart
-
-To install the chart with the release name `my-release`,
-
-```bash
-$ helm install --name my-release fission-all
-```
-
-## Uninstalling the chart
-
-To uninstall/delete chart,
-
-```bash
-$ helm delete my-release
-```
-
-## Configuration
-
-The following table lists the configurable parameters of the Fission chart and their default values.
-
-Parameter | Description | Default
--------- | ----------- | -------
-`serviceType` | Type of Fission Controller service to use. For minikube, set this to NodePort, elsewhere use LoadBalancer or ClusterIP. | `ClusterIP`
-`routerServiceType` | Type of Fission Router service to use. For minikube, set this to NodePort, elsewhere use LoadBalancer or ClusterIP. | `LoadBalancer`
-`repository` | Image base repository | `index.docker.io`
-`image` | Fission image repository | `fission/fission-bundle`
-`imageTag` | Fission image tag | `1.13.1`
-`pullPolicy` | Image pull policy | `IfNotPresent`
-`fetcher.image` | Fission fetcher repository | `fission/fetcher`
-`fetcher.imageTag` | Fission fetcher image tag | `1.13.1`
-`controllerPort` | Fission Controller service port | `31313`
-`routerPort` | Fission Router service port | ` 31314`
-`functionNamespace` | Namespace in which to run fission functions (this is different from the release namespace) | `fission-function`
-`builderNamespace` | Namespace in which to run fission builders (this is different from the release namespace) | `fission-builder`
-`enableIstio` | Enable istio integration | `false`
-`persistence.enabled` | If true, persist data to a persistent volume | `true`
-`persistence.existingClaim` | Provide an existing PersistentVolumeClaim instead of creating a new one | `nil`
-`persistence.storageClass` | PersistentVolumeClaim storage class | `nil`
-`persistence.accessMode` | PersistentVolumeClaim access mode | `ReadWriteOnce`
-`persistence.size` | PersistentVolumeClaim size | `8Gi`
-`analytics` | Analytics let us count how many people installed fission. Set to false to disable analytics | `true`
-`analyticsNonHelmInstall` | Internally used for generating an analytics job for non-helm installs | `false`
-`pruneInterval` | The frequency of archive pruner (in minutes) | `60`
-`preUpgradeChecksImage` | Fission pre-install/pre-upgrade checks live in this image | `fission/pre-upgrade-checks`
-`debugEnv` | If there are any pod specialization errors when a function is triggered and this flag is set to true, the error summary is returned as part of http response | `true`
-`prometheus.enabled` | Set to true if prometheus needs to be deployed along with fission | `true` in `fission-all`, `false` in `fission-core`
-`prometheus.serviceEndpoint` | If prometheus.enabled is false, please assign the prometheus service URL that is accessible by components. | `nil`
-`canaryDeployment.enabled` | Set to true if you need canary deployment feature | `true` in `fission-all`, `false` in `fission-core`
-`extraCoreComponentPodConfig` | Extend the container specs for the core fission pods. Can be used to add things like affinty/tolerations/nodeSelectors/etc. | None
-`executor.adoptExistingResources` | If true, executor will try to adopt existing resources created by the old executor instance. | `false`
-`router.deployAsDaemonSet` | Deploy router as DaemonSet instead of Deployment | `false`
-`router.extraCoreComponentPodConfig` | Extend the container specs for the router fission pods. Can be used to add things like affinty/tolerations/nodeSelectors/etc. Overrides the generic `extraCoreComponentPodConfig`| None
-`router.svcAddressMaxRetries` | Max retries times for router to retry on a certain service URL returns from cache/executor | `5`
-`router.svcAddressUpdateTimeout` | The length of update lock expiry time for router to get a service URL returns from executor | `30`
-`router.svcAnnotations` | Annotations for router service | None
-`router.useEncodedPath` | For router to match encoded path. If true, "/foo%2Fbar" will match the path "/{var}"; Otherwise, it will match the path "/foo/bar". | `false`
-`router.traceSamplingRate` | Uniformly sample traces with the given probabilistic sampling rate | `0.5`
-`router.roundTrip.disableKeepAlive` | Disable transport keep-alive for fast switching function version | `true`
-`router.roundTrip.keepAliveTime` | The keep-alive period for an active network connection to function pod | `30s`
-`router.roundTrip.timeout` | HTTP transport request timeout | `50ms`
-`router.roundTrip.timeoutExponent` | The length of request timeout will multiply with timeoutExponent after each retry | `2` 
-`router.roundTrip.maxRetries` | Max retries times of a failed request | `10`
-`openTracing.enabled` | If true, OpenTracing is enabled | `false`
-`openTracing.collectorEndpoint` | Jaeger collector endpoint | ``
-`openTracing.samplingRate` | Probabilistic sampling rate | `0.5`
-`otelCollectorEndpoint` | OpenTelemetry collector endpoint | None
-
-### Extra configuration for `fission-all`
-
-Parameter | Description | Default
--------- | ----------- | -------
-`createNamespace` | If true, create `fission-function` and `fission-builder` namespaces | ` true`
-`logger.influxdbAdmin` | Log database admin username | `admin`
-`logger.fluentdImageRepository` | Logger fluentbit image repository | `index.docker.io`
-`logger.fluentdImage` | Logger fluentbit image | `fluent/fluent-bit`
-`logger.fluentdImageTag` | Logger fluentbit image tag | `1.0.4`
-`nats.enabled` | Nats streaming enabled | `true`
-`nats.external` | Use external Nats installation | `false`
-`nats.hostaddress` | Address of NATS cluster | `nats-streaming:4222`
-`nats.authToken` | Nats streaming auth token | `defaultFissionAuthToken`
-`nats.clusterID` | Nats streaming clusterID | `fissionMQTrigger`
-`nats.clientID`  | Client name registered with nats streaming | `fission`
-`nats.queueGroup` | Queue group registered with nats streaming | `fission-messageQueueNatsTrigger`
-`natsStreamingPort` | Nats streaming service port | `31316`
-`azureStorageQueue.enabled` | Azure storage account name | `false`
-`azureStorageQueue.key` | Azure storage account name | `""`
-`azureStorageQueue.accountName` | Azure storage access key | `""`
-`kafka.enabled` | Kafka trigger enabled | `false`
-`kafka.brokers` | Kafka brokers uri | `broker.kafka:9092`
-`kafka.version` | Kafka broker version | `nil`
-`heapster` | Enable Heapster (only enable this in clusters where heapster does not exist already) | `false`
-
-Please note that deploying of Azure Storage Queue or Kafka is not done by Fission chart and you will have to explicitly deploy them.
-
-Specify each parameter using the `--set key=value[,key=value]` argument to `helm install`. For example,
-
-```bash
-$ helm install --name my-release --set image=custom/fission-bundle,imageTag=v1 fission-all
-```
-
-If you're using minikube, set serviceType and routerServiceType to NodePort:
-
-```bash
-$ helm install --name my-release --set serviceType=NodePort,routerServiceType=NodePort fission-all
-```
-
-You can also set parameters with a yaml file (see [values.yaml](fission-all/values.yaml) for
-what it should look like):
-
-```bash
-$ helm install --name my-release -f values.yaml fission-all
-```
@@ -1,6 +1,6 @@
 dependencies:
 - name: prometheus
  repository: https://prometheus-community.github.io/helm-charts
-  version: 13.2.1
-digest: sha256:136360a97bdc11f1933d75bab77728acc75dd9583257b973cb3336b6d136c9b6
-generated: "2021-05-27T18:51:04.509283+05:30"
+  version: 14.11.0
+digest: sha256:1404b25cbdba70279240fead15b765d6945097fed5afc7e184da02dabfaa577a
+generated: "2021-10-19T17:20:08.919609+05:30"
@@ -1,21 +1,29 @@
 apiVersion: v2
 name: fission-all
-version: v1.15.0-rc1
+version: v1.15.0
+appVersion: v1.15.0
 description: Fission is a fast serverless framework for Kubernetes.
-keywords:
- fission
- serverless
 home: https://fission.io/
+icon: https://fission.io/images/fission-logo-white.svg
+sources:
+  - https://github.com/fission/fission
+  - https://github.com/fission/keda-connectors
+keywords:
+  - fission
+  - serverless
+  - platform
+  - faas
+  - functions
+  - Integration & Delivery
 maintainers:
  - name: Vishal Biyani
    email: vishal@infracloud.io
  - name: Sanket Sudake
    email: sanket@infracloud.io
 engine: gotpl
-appVersion: v1.15.0-rc1
 type: application
 dependencies:
  - name: prometheus
-    version: 13.2.1
+    version: 14.11.0
    repository: https://prometheus-community.github.io/helm-charts
-    condition: prometheus.enabled
+    condition: prometheus.enabled
@@ -0,0 +1,132 @@
+# fission-all
+
+[Fission](https://fission.io/) is a framework for serverless functions on Kubernetes.
+
+## Prerequisites
+
+- Kubernetes 1.19+
+- Helm 3+
+
+## Get Repo Info
+
+```console
+helm repo add fission-charts https://fission.github.io/fission-charts
+helm repo update
+```
+
+_See [helm repo](https://helm.sh/docs/helm/helm_repo/) for command documentation._
+
+## Install Chart
+
+Replace `{{version}}` with [the latest Fission version](https://github.com/fission/fission/releases/latest).
+![GitHub release (latest SemVer)](https://img.shields.io/github/v/release/fission/fission)
+
+```console
+# Helm
+$ export FISSION_NAMESPACE="fission"
+$ kubectl create namespace $FISSION_NAMESPACE
+$ kubectl create -k "github.com/fission/fission/crds/v1?ref={{version}}"
+$ helm install [RELEASE_NAME] fission-charts/fission-all --namespace fission
+```
+
+_See [configuration](#configuration) below._
+
+_See [helm install](https://helm.sh/docs/helm/helm_install/) for command documentation._
+
+## Dependencies
+
+By default, this chart installs additional, dependent charts:
+
+- [prometheus-community/prometheus](https://github.com/prometheus-community/helm-charts/tree/main/charts/prometheus)
+
+To disable dependencies during installation, see [multiple releases](#multiple-releases) below.
+
+_See [helm dependency](https://helm.sh/docs/helm/helm_dependency/) for command documentation._
+
+## Uninstall Chart
+
+```console
+# Helm
+$ helm uninstall [RELEASE_NAME]
+```
+
+This removes all the Kubernetes components associated with the chart and deletes the release.
+
+_See [helm uninstall](https://helm.sh/docs/helm/helm_uninstall/) for command documentation._
+
+CRDs are not removed by this chart and should be manually cleaned up:
+
+`{{version}}` references the version you used during the installation of chart.
+
+```console
+kubectl delete -k "github.com/fission/fission/crds/v1?ref={{version}}"
+```
+
+OR
+
+You can list all Fission CRDs and clean them up with `kubectl delete crd` command.
+
+```console
+kubectl get crds| grep ".fission.io"
+```
+
+## Upgrading Chart
+
+CRDs created by this chart are not updated by default and should be manually updated.
+
+`{{version}}` references the version you are upgrading to ![GitHub release (latest SemVer)](https://img.shields.io/github/v/release/fission/fission)
+
+```console
+kubectl replace -k "github.com/fission/fission/crds/v1?ref={{version}}"
+```
+
+```console
+# Helm
+$ helm upgrade [RELEASE_NAME] fission-charts/fission-all
+```
+
+_See [configuration](#configuration) below._
+
+_See [helm upgrade](https://helm.sh/docs/helm/helm_upgrade/) for command documentation._
+
+### Upgrading an existing Release to a new major version
+
+A major chart version change (like v1.2.3 -> v2.0.0) indicates that there is an incompatible breaking change needing manual actions.
+
+### Upgrade from 1.14.x to 1.15.x
+
+With 1.15.x release, following changes are made:
+
+- `fission-core` chart is removed
+- `fission-all` chart is made similar `fission-core` chart
+- In the `fission-all` chart, the following components are disabled which were enabled by default earlier. If you want to enable them, please use `--set` flag.
+
+  - nats - Set `nats.enabled=true` to enable Fission Nats integration
+  - influxdb - Set `influxdb.enabled=true` to enable Fission InfluxDB and logger component
+  - prometheus - Set `prometheus.enabled=true` to install Prometheus with Fission
+  - canaryDeployment - Set `canaryDeployment.enabled=true` to enable Canary Deployment
+
+## Migrating from fission-core chart
+
+With the release of Fission v1.15.x, the fission-core chart was removed.
+Fission-all is now exactly similar to fission-core and can be used to migrate from fission-core.
+
+If you are upgrading from the fission-core chart, you can use the following command to migrate with required changes.
+
+```console
+ helm upgrade [RELEASE_NAME] fission-charts/fission-all --namespace fission
+ ```
+
+## Configuration
+
+See [Customizing the Chart Before Installing](https://helm.sh/docs/intro/using_helm/#customizing-the-chart-before-installing). To see all configurable options with detailed comments:
+
+```console
+helm show values fission-charts/fission-all
+```
+
+You may also `helm show values` on this chart's [dependencies](#dependencies) for additional options.
+
+### Multiple releases
+
+The same chart can be used to run multiple Fission instances in the same cluster if required. To disable a dependency during installation, set `prometheus.enabled` to `false`.
@@ -41,5 +41,11 @@ spec:
          env:
            - name: GA_TRACKING_ID
              value: "{{ .Values.gaTrackingID }}"
+        {{- if .Values.terminationMessagePath }}
+          terminationMessagePath: {{ .Values.terminationMessagePath }}
+        {{- end }}
+        {{- if .Values.terminationMessagePolicy }}
+          terminationMessagePolicy: {{ .Values.terminationMessagePolicy }}
+        {{- end }}
      serviceAccountName: fission-svc
 {{- end }}
@@ -41,5 +41,11 @@ spec:
          env:
            - name: GA_TRACKING_ID
              value: "{{ .Values.gaTrackingID }}"
+          {{- if .Values.terminationMessagePath }}
+          terminationMessagePath: {{ .Values.terminationMessagePath }}
+          {{- end }}
+          {{- if .Values.terminationMessagePolicy }}
+          terminationMessagePolicy: {{ .Values.terminationMessagePolicy }}
+          {{- end }}
      serviceAccountName: fission-svc
 {{- end }}
@@ -0,0 +1,63 @@
+apiVersion: apps/v1
+kind: Deployment
+metadata:
+  name: buildermgr
+  labels:
+    chart: "{{ .Chart.Name }}-{{ .Chart.Version }}"
+    svc: buildermgr
+spec:
+  replicas: 1
+  selector:
+    matchLabels:
+      svc: buildermgr
+  template:
+    metadata:
+      labels:
+        svc: buildermgr
+    spec:
+      containers:
+      - name: buildermgr
+        image: {{ include "fission-bundleImage" . | quote }}
+        imagePullPolicy: {{ .Values.pullPolicy }}
+        command: ["/fission-bundle"]
+        args: ["--builderMgr", "--storageSvcUrl", "http://storagesvc.{{ .Release.Namespace }}", "--envbuilder-namespace", "{{ .Values.builderNamespace }}"]
+        env:
+        - name: FETCHER_IMAGE
+        {{- if eq .Values.fetcher.imageTag "" }}
+          value: "{{ .Values.fetcher.image }}"
+        {{- else }}
+          value: "{{ .Values.fetcher.image }}:{{ .Values.fetcher.imageTag }}"
+        {{- end }}
+        - name: FETCHER_IMAGE_PULL_POLICY
+          value: "{{ .Values.pullPolicy }}"
+        - name: BUILDER_IMAGE_PULL_POLICY
+          value: "{{ .Values.pullPolicy }}"
+        - name: ENABLE_ISTIO
+          value: "{{ .Values.enableIstio }}"
+        - name: FETCHER_MINCPU
+          value: {{ .Values.fetcher.resource.cpu.requests | quote }}
+        - name: FETCHER_MINMEM
+          value: {{ .Values.fetcher.resource.mem.requests | quote }}
+        - name: FETCHER_MAXCPU
+          value: {{ .Values.fetcher.resource.cpu.limits | quote }}
+        - name: FETCHER_MAXMEM
+          value: {{ .Values.fetcher.resource.mem.limits | quote }}
+        - name: DEBUG_ENV
+          value: {{ .Values.debugEnv | quote }}
+        - name: PPROF_ENABLED
+          value: {{ .Values.pprof.enabled | quote }}
+        {{- include "opentracing.envs" . | indent 8 }}
+        {{- include "opentelemtry.envs" . | indent 8 }}
+        {{- if .Values.terminationMessagePath }}
+        terminationMessagePath: {{ .Values.terminationMessagePath }}
+        {{- end }}
+        {{- if .Values.terminationMessagePolicy }}
+        terminationMessagePolicy: {{ .Values.terminationMessagePolicy }}
+        {{- end }}
+      serviceAccountName: fission-svc
+{{- if .Values.priorityClassName }}
+      priorityClassName: {{ .Values.priorityClassName }}
+{{- end }}
+{{- if .Values.extraCoreComponentPodConfig }}
+{{ toYaml .Values.extraCoreComponentPodConfig | indent 6 -}}
+{{- end }}
@@ -0,0 +1,115 @@
+apiVersion: rbac.authorization.k8s.io/v1
+kind: ClusterRole
+metadata:
+  name: fission-cr-admin
+rules:
+- apiGroups:
+  - ""
+  resources:
+  - configmaps
+  - pods
+  - secrets
+  - services
+  - serviceaccounts
+  - replicationcontrollers
+  - namespaces
+  - events
+  verbs:
+  - create
+  - delete
+  - get
+  - list
+  - watch
+  - patch
+- apiGroups:
+  - apps
+  resources:
+  - deployments
+  - deployments/scale
+  - replicasets
+  verbs:
+  - '*'
+- apiGroups:
+  - batch
+  resources:
+  - jobs
+  verbs:
+  - get
+  - list
+  - watch
+- apiGroups:
+  - networking.k8s.io
+  resources:
+  - ingresses
+  verbs:
+  - '*'
+- apiGroups:
+  - apiextensions.k8s.io
+  resources:
+  - customresourcedefinitions
+  verbs:
+  - get
+  - list
+  - watch
+- apiGroups:
+  - fission.io
+  resources:
+  - canaryconfigs
+  - environments
+  - functions
+  - httptriggers
+  - kuberneteswatchtriggers
+  - messagequeuetriggers
+  - packages
+  - timetriggers
+  verbs:
+  - '*'
+- apiGroups:
+  - autoscaling
+  resources:
+  - horizontalpodautoscalers
+  verbs:
+  - '*'
+- apiGroups:
+  - rbac.authorization.k8s.io
+  resources:
+  - rolebindings
+  verbs:
+  - '*'
+- apiGroups:
+  - rbac.authorization.k8s.io
+  resources:
+  - clusterroles
+  verbs:
+  - bind
+- apiGroups:
+  - keda.sh
+  resources:
+  - scaledjobs
+  - scaledobjects
+  - scaledjobs/finalizers
+  - scaledjobs/status
+  - triggerauthentications
+  - triggerauthentications/status
+  verbs:
+  - '*'
+{{- if .Values.mqt_keda.enabled }}
+- apiGroups:
+  - keda.k8s.io
+  resources:
+  - scaledjobs
+  - scaledobjects
+  - scaledjobs/finalizers
+  - scaledjobs/status
+  - triggerauthentications
+  - triggerauthentications/status
+  verbs:
+  - '*'
+{{- end }}
+- apiGroups:
+  - metrics.k8s.io
+  resources:
+  - pods
+  verbs:
+  - get
+  - list
@@ -0,0 +1,12 @@
+kind: ClusterRoleBinding
+apiVersion: rbac.authorization.k8s.io/v1
+metadata:
+  name: fission-cr-admin
+subjects:
+  - kind: ServiceAccount
+    name: fission-svc
+    namespace: {{ .Release.Namespace }}
+roleRef:
+  kind: ClusterRole
+  name: fission-cr-admin
+  apiGroup: rbac.authorization.k8s.io
@@ -0,0 +1,5 @@
+apiVersion: v1
+kind: ServiceAccount
+metadata:
+  name: fission-svc
+  namespace: {{ .Release.Namespace }}
@@ -0,0 +1,7 @@
+apiVersion: v1
+kind: ConfigMap
+metadata:
+  name: feature-config
+  namespace: {{ .Release.Namespace }}
+data:
+  "config.yaml": {{ include "config" . | b64enc }}
@@ -0,0 +1,81 @@
+apiVersion: apps/v1
+kind: Deployment
+metadata:
+  name: controller
+  labels:
+    chart: "{{ .Chart.Name }}-{{ .Chart.Version }}"
+    svc: controller
+    application: fission-api
+spec:
+  replicas: 1
+  selector:
+    matchLabels:
+      svc: controller
+      application: fission-api
+  template:
+    metadata:
+      labels:
+        svc: controller
+        application: fission-api
+    spec:
+      containers:
+      - name: controller
+        image: {{ include "fission-bundleImage" . | quote }}
+        imagePullPolicy: {{ .Values.pullPolicy }}
+        command: ["/fission-bundle"]
+        args: ["--controllerPort", "8888"]
+        env:
+        - name: FISSION_FUNCTION_NAMESPACE
+          value: "{{ .Values.functionNamespace }}"
+        - name: DEBUG_ENV
+          value: {{ .Values.debugEnv | quote }}
+        - name: PPROF_ENABLED
+          value: {{ .Values.pprof.enabled | quote }}
+        - name: POD_NAMESPACE
+          valueFrom:
+            fieldRef:
+              fieldPath: metadata.namespace
+        {{- include "opentracing.envs" . | indent 8 }}
+        {{- include "opentelemtry.envs" . | indent 8 }}
+        {{- if .Values.terminationMessagePath }}
+        terminationMessagePath: {{ .Values.terminationMessagePath }}
+        {{- end }}
+        {{- if .Values.terminationMessagePolicy }}
+        terminationMessagePolicy: {{ .Values.terminationMessagePolicy }}
+        {{- end }}
+        readinessProbe:
+          httpGet:
+            path: "/healthz"
+            port: 8888
+          initialDelaySeconds: 1
+          periodSeconds: 1
+          failureThreshold: 30
+        livenessProbe:
+          httpGet:
+            path: "/healthz"
+            port: 8888
+          initialDelaySeconds: 35
+          periodSeconds: 5
+        volumeMounts:
+        - name: config-volume
+          mountPath: /etc/config/config.yaml
+          subPath: config.yaml
+        ports:
+          - containerPort: 8888
+            name: http
+        {{- if .Values.pprof.enabled }}
+          - containerPort: 6060
+            name: pprof
+        {{- end }}
+  
+      serviceAccountName: fission-svc
+      volumes:
+      - name: config-volume
+        configMap:
+          name: feature-config
+{{- if .Values.priorityClassName }}
+      priorityClassName: {{ .Values.priorityClassName }}
+{{- end }}
+{{- if .Values.extraCoreComponentPodConfig }}
+{{ toYaml .Values.extraCoreComponentPodConfig | indent 6 -}}
+{{- end }}
@@ -0,0 +1,18 @@
+apiVersion: v1
+kind: Service
+metadata:
+  name: controller
+  labels:
+    svc: controller
+    application: fission-api
+    chart: "{{ .Chart.Name }}-{{ .Chart.Version }}"
+spec:
+  type: {{ .Values.serviceType }}
+  ports:
+  - port: 80
+    targetPort: 8888
+{{- if eq .Values.serviceType "NodePort" }}
+    nodePort: {{ .Values.controllerPort }}
+{{- end }}
+  selector:
+    svc: controller
@@ -0,0 +1,99 @@
+apiVersion: apps/v1
+kind: Deployment
+metadata:
+  name: executor
+  labels:
+    chart: "{{ .Chart.Name }}-{{ .Chart.Version }}"
+    svc: executor
+spec:
+  replicas: 1
+  selector:
+    matchLabels:
+      svc: executor
+  template:
+    metadata:
+      labels:
+        svc: executor
+      annotations:
+        prometheus.io/scrape: "true"
+        prometheus.io/path: "/metrics"
+        prometheus.io/port: "8080"
+    spec:
+      containers:
+      - name: executor
+        image: {{ include "fission-bundleImage" . | quote }}
+        imagePullPolicy: {{ .Values.pullPolicy }}
+        command: ["/fission-bundle"]
+        args: ["--executorPort", "8888", "--namespace", "{{ .Values.functionNamespace }}"]
+        env:
+        - name: FETCHER_IMAGE
+        {{- if eq .Values.fetcher.imageTag "" }}
+          value: "{{ .Values.fetcher.image }}"
+        {{- else }}
+          value: "{{ .Values.fetcher.image }}:{{ .Values.fetcher.imageTag }}"
+        {{- end }}
+        - name: FETCHER_IMAGE_PULL_POLICY
+          value: "{{ .Values.pullPolicy }}"
+        - name: RUNTIME_IMAGE_PULL_POLICY
+          value: "{{ .Values.pullPolicy }}"
+        - name: ADOPT_EXISTING_RESOURCES
+          value: {{ .Values.executor.adoptExistingResources | default false | quote }}
+        - name: POD_READY_TIMEOUT
+          value: {{ .Values.executor.podReadyTimeout | default false | quote }}
+        - name: ENABLE_ISTIO
+          value: "{{ .Values.enableIstio }}"
+        - name: FETCHER_MINCPU
+          value: {{ .Values.fetcher.resource.cpu.requests | quote }}
+        - name: FETCHER_MINMEM
+          value: {{ .Values.fetcher.resource.mem.requests | quote }}
+        - name: FETCHER_MAXCPU
+          value: {{ .Values.fetcher.resource.cpu.limits | quote }}
+        - name: FETCHER_MAXMEM
+          value: {{ .Values.fetcher.resource.mem.limits | quote }}
+        - name: DEBUG_ENV
+          value: {{ .Values.debugEnv | quote }}
+        - name: PPROF_ENABLED
+          value: {{ .Values.pprof.enabled | quote }}
+        {{- include "opentracing.envs" . | indent 8 }}
+        {{- include "opentelemtry.envs" . | indent 8 }}
+        readinessProbe:
+          httpGet:
+            path: "/healthz"
+            port: 8888
+          initialDelaySeconds: 1
+          periodSeconds: 1
+          failureThreshold: 30
+        livenessProbe:
+          httpGet:
+            path: "/healthz"
+            port: 8888
+          initialDelaySeconds: 35
+          periodSeconds: 5
+        ports:
+        - containerPort: 8080
+          name: metrics
+        - containerPort: 8888
+          name: http
+        {{- if .Values.pprof.enabled }}
+        - containerPort: 6060
+          name: pprof
+        {{- end }}
+        {{- if .Values.executor.terminationMessagePath }}
+        terminationMessagePath: {{ .Values.executor.terminationMessagePath }}
+        {{- else if .Values.terminationMessagePath }}
+        terminationMessagePath: {{ .Values.terminationMessagePath }}
+        {{- end }}
+        {{- if .Values.executor.terminationMessagePolicy }}
+        terminationMessagePolicy: {{ .Values.executor.terminationMessagePolicy }}
+        {{- else if .Values.terminationMessagePolicy }}
+        terminationMessagePolicy: {{ .Values.terminationMessagePolicy }}
+        {{- end }}
+      serviceAccountName: fission-svc
+{{- if .Values.executor.priorityClassName }}
+      priorityClassName: {{ .Values.executor.priorityClassName }}
+{{- else if .Values.priorityClassName }}
+      priorityClassName: {{ .Values.priorityClassName }}
+{{- end }}
+{{- if .Values.extraCoreComponentPodConfig }}
+{{ toYaml .Values.extraCoreComponentPodConfig | indent 6 -}}
+{{- end }}
@@ -0,0 +1,14 @@
+apiVersion: v1
+kind: Service
+metadata:
+  name: executor
+  labels:
+    svc: executor
+    chart: "{{ .Chart.Name }}-{{ .Chart.Version }}"
+spec:
+  type: ClusterIP
+  ports:
+    - port: 80
+      targetPort: 8888
+  selector:
+    svc: executor
@@ -1,3 +1,4 @@
+{{- if .Values.influxdb.enabled }}
 # Fluentbit deployment for Fission
 #
 # Requires:
@@ -190,3 +191,4 @@ spec:
            name: {{ .Release.Name }}-fission-fluentbit
  updateStrategy:
    type: RollingUpdate
+{{- end }}
@@ -0,0 +1,55 @@
+{{- if .Values.influxdb.enabled }}
+apiVersion: v1
+kind: Service
+metadata:
+  name: influxdb
+  labels:
+    svc: influxdb
+    chart: "{{ .Chart.Name }}-{{ .Chart.Version }}"
+spec:
+  type: ClusterIP
+  ports:
+  - port: 8086
+    targetPort: 8086
+  selector:
+    svc: influxdb
+
+---
+apiVersion: apps/v1
+kind: Deployment
+metadata:
+  name: influxdb
+  labels:
+    chart: "{{ .Chart.Name }}-{{ .Chart.Version }}"
+    svc: influxdb
+spec:
+  replicas: 1
+  selector:
+    matchLabels:
+      svc: influxdb
+  template:
+    metadata:
+      labels:
+        svc: influxdb
+    spec:
+      containers:
+      - name: influxdb
+        image: {{ .Values.influxdb.image | quote }}
+        imagePullPolicy: {{ .Values.pullPolicy }}
+        env:
+        - name: INFLUXDB_DB
+          value: fissionFunctionLog
+        - name: INFLUXDB_ADMIN_USER
+          valueFrom:
+            secretKeyRef:
+              name: influxdb
+              key: username
+        - name: INFLUXDB_ADMIN_PASSWORD
+          valueFrom:
+            secretKeyRef:
+              name: influxdb
+              key: password
+{{- if .Values.extraCoreComponentPodConfig }}
+{{ toYaml .Values.extraCoreComponentPodConfig | indent 6 -}}
+{{- end }}
+{{- end }}
@@ -0,0 +1,12 @@
+{{- if .Values.influxdb.enabled }}
+apiVersion: v1
+kind: Secret
+metadata:
+  name: influxdb
+  labels:
+    chart: "{{ .Chart.Name }}-{{ .Chart.Version }}"
+type: Opaque
+data:
+  username: {{ .Values.logger.influxdbAdmin | b64enc | quote }}
+  password: {{ randAlphaNum 20 | b64enc | quote }}
+{{- end }}
@@ -0,0 +1,43 @@
+apiVersion: apps/v1
+kind: Deployment
+metadata:
+  name: kubewatcher
+  labels:
+    chart: "{{ .Chart.Name }}-{{ .Chart.Version }}"
+    svc: kubewatcher
+spec:
+  replicas: 1
+  selector:
+    matchLabels:
+      svc: kubewatcher
+  template:
+    metadata:
+      labels:
+        svc: kubewatcher
+    spec:
+      containers:
+      - name: kubewatcher
+        image: {{ include "fission-bundleImage" . | quote }}
+        imagePullPolicy: {{ .Values.pullPolicy }}
+        command: ["/fission-bundle"]
+        args: ["--kubewatcher", "--routerUrl", "http://router.{{ .Release.Namespace }}"]
+        env:
+        - name: DEBUG_ENV
+          value: {{ .Values.debugEnv | quote }}
+        - name: PPROF_ENABLED
+          value: {{ .Values.pprof.enabled | quote }}
+        {{- include "opentracing.envs" . | indent 8 }}
+        {{- include "opentelemtry.envs" . | indent 8 }}
+        {{- if .Values.terminationMessagePath }}
+        terminationMessagePath: {{ .Values.terminationMessagePath }}
+        {{- end }}
+        {{- if .Values.terminationMessagePolicy }}
+        terminationMessagePolicy: {{ .Values.terminationMessagePolicy }}
+        {{- end }}
+      serviceAccountName: fission-svc
+{{- if .Values.priorityClassName }}
+      priorityClassName: {{ .Values.priorityClassName }}
+{{- end }}
+{{- if .Values.extraCoreComponentPodConfig }}
+{{ toYaml .Values.extraCoreComponentPodConfig | indent 6 -}}
+{{- end }}
@@ -0,0 +1,33 @@
+apiVersion: rbac.authorization.k8s.io/v1
+kind: ClusterRole
+metadata:
+  name: secret-configmap-getter
+rules:
+  - apiGroups:
+      - "*"
+    resources:
+      - secrets
+      - configmaps
+    verbs:
+      - get
+      - watch
+      - list
+
+---
+apiVersion: rbac.authorization.k8s.io/v1
+kind: ClusterRole
+metadata:
+  name: package-getter
+rules:
+  - apiGroups:
+      - "*"
+    resources:
+      - packages
+    verbs:
+      - "*"
+  - apiGroups:
+      - rbac.authorization.k8s.io
+    resources:
+      - rolebindings
+    verbs:
+      - "*"
@@ -0,0 +1,24 @@
+{{- if .Values.createNamespace }}
+apiVersion: v1
+kind: Namespace
+metadata:
+  name: {{ .Values.functionNamespace }}
+  labels:
+    name: fission-function
+    chart: "{{ .Chart.Name }}-{{ .Chart.Version }}"
+    {{- if .Values.enableIstio }}
+    istio-injection: enabled
+    {{- end }}
+
+---
+apiVersion: v1
+kind: Namespace
+metadata:
+  name: {{ .Values.builderNamespace }}
+  labels:
+    name: fission-builder
+    chart: "{{ .Chart.Name }}-{{ .Chart.Version }}"
+    {{- if .Values.enableIstio }}
+    istio-injection: enabled
+    {{- end }}
+{{- end }}
@@ -0,0 +1,70 @@
+apiVersion: rbac.authorization.k8s.io/v1
+kind: Role
+metadata:
+  name: fission-fetcher
+  namespace: default
+rules:
+  - apiGroups:
+      - ""
+    resources:
+      - configmaps
+      - secrets
+      - pods
+    verbs:
+      - get
+      - list
+      - watch
+  - apiGroups:
+      - ""
+    resources:
+      - events
+    verbs:
+      - "*"
+  - apiGroups:
+      - fission.io
+    resources:
+      - canaryconfigs
+      - environments
+      - functions
+      - httptriggers
+      - kuberneteswatchtriggers
+      - messagequeuetriggers
+      - packages
+      - timetriggers
+    verbs:
+      - "*"
+
+---
+apiVersion: rbac.authorization.k8s.io/v1
+kind: Role
+metadata:
+  name: fission-builder
+  namespace: default
+rules:
+  - apiGroups:
+      - fission.io
+    resources:
+      - canaryconfigs
+      - environments
+      - functions
+      - httptriggers
+      - kuberneteswatchtriggers
+      - messagequeuetriggers
+      - packages
+      - timetriggers
+    verbs:
+      - "*"
+
+---
+apiVersion: rbac.authorization.k8s.io/v1
+kind: Role
+metadata:
+  namespace: {{ .Values.functionNamespace }}
+  name: event-fetcher
+rules:
+  - apiGroups: [""] # "" indicates the core API group
+    resources: ["pods"]
+    verbs: ["get", "watch", "list"]
+  - apiGroups: [""] # "" indicates the core API group
+    resources: ["events"]
+    verbs: ["*"]
@@ -0,0 +1,43 @@
+apiVersion: rbac.authorization.k8s.io/v1
+kind: RoleBinding
+metadata:
+  name: fission-fetcher
+  namespace: default
+roleRef:
+  apiGroup: rbac.authorization.k8s.io
+  kind: Role
+  name: fission-fetcher
+subjects:
+  - kind: ServiceAccount
+    name: fission-fetcher
+    namespace: {{ .Values.functionNamespace }}
+
+---
+apiVersion: rbac.authorization.k8s.io/v1
+kind: RoleBinding
+metadata:
+  name: fission-builder
+  namespace: default
+roleRef:
+  apiGroup: rbac.authorization.k8s.io
+  kind: Role
+  name: fission-builder
+subjects:
+  - kind: ServiceAccount
+    name: fission-builder
+    namespace: {{ .Values.builderNamespace }}
+
+---
+apiVersion: rbac.authorization.k8s.io/v1
+kind: RoleBinding
+metadata:
+  name: fission-fetcher-pod-reader
+  namespace: {{ .Values.functionNamespace }}
+roleRef:
+  apiGroup: rbac.authorization.k8s.io
+  kind: Role
+  name: event-fetcher
+subjects:
+  - kind: ServiceAccount
+    name: fission-fetcher
+    namespace: {{ .Values.functionNamespace }}
@@ -0,0 +1,12 @@
+apiVersion: v1
+kind: ServiceAccount
+metadata:
+  name: fission-fetcher
+  namespace: {{ .Values.functionNamespace }}
+
+---
+apiVersion: v1
+kind: ServiceAccount
+metadata:
+  name: fission-builder
+  namespace: {{ .Values.builderNamespace }}
@@ -0,0 +1,58 @@
+{{- if .Values.azureStorageQueue.enabled }}
+apiVersion: apps/v1
+kind: Deployment
+metadata:
+  name: mqtrigger-azure-storage-queue
+  labels:
+    chart: "{{ .Chart.Name }}-{{ .Chart.Version }}"
+    svc: mqtrigger
+    messagequeue: azure-storage-queue
+spec:
+  replicas: 1
+  selector:
+    matchLabels:
+      svc: mqtrigger
+      messagequeue: azure-storage-queue
+  template:
+    metadata:
+      labels:
+        svc: mqtrigger
+        messagequeue: azure-storage-queue
+    spec:
+      containers:
+      - name: mqtrigger
+      {{- if eq .Values.imageTag "" }}
+        image: "{{ .Values.image }}"
+      {{- else }}
+        image: "{{ .Values.image }}:{{ .Values.imageTag }}"
+      {{- end }}
+        imagePullPolicy: {{ .Values.pullPolicy }}
+        command: ["/fission-bundle"]
+        args: ["--mqt", "--routerUrl", "http://router.{{ .Release.Namespace }}"]
+        env:
+        - name: MESSAGE_QUEUE_TYPE
+          value: azure-storage-queue
+        - name: AZURE_STORAGE_ACCOUNT_NAME
+          value: {{ required "An Azure storage account name is required." .Values.azureStorageQueue.accountName }}
+        - name: AZURE_STORAGE_ACCOUNT_KEY
+          valueFrom:
+            secretKeyRef:
+              name: azure-storage-account-key
+              key: key
+        - name: DEBUG_ENV
+          value: {{ .Values.debugEnv | quote }}
+        - name: PPROF_ENABLED
+          value: {{ .Values.pprof.enabled | quote }}
+        {{- include "opentracing.envs" . | indent 8 }}
+        {{- include "opentelemtry.envs" . | indent 8 }}
+        {{- if .Values.terminationMessagePath }}
+        terminationMessagePath: {{ .Values.terminationMessagePath }}
+        {{- end }}
+        {{- if .Values.terminationMessagePolicy }}
+        terminationMessagePolicy: {{ .Values.terminationMessagePolicy }}
+        {{- end }}
+      serviceAccountName: fission-svc
+{{- if .Values.extraCoreComponentPodConfig }}
+{{ toYaml .Values.extraCoreComponentPodConfig | indent 6 -}}
+{{- end }}
+{{- end }}
@@ -1,16 +1,4 @@
-apiVersion: v1
-kind: Secret
-metadata:
-  name: influxdb
-  labels:
-    chart: "{{ .Chart.Name }}-{{ .Chart.Version }}"
-type: Opaque
-data:
-  username: {{ .Values.logger.influxdbAdmin | b64enc | quote }}
-  password: {{ randAlphaNum 20 | b64enc | quote }}
-
 {{- if .Values.azureStorageQueue.enabled }}
---
 apiVersion: v1
 kind: Secret
 metadata:
@@ -0,0 +1,100 @@
+{{- if .Values.kafka.enabled }}
+apiVersion: apps/v1
+kind: Deployment
+metadata:
+  name: mqtrigger-kafka
+  labels:
+    chart: "{{ .Chart.Name }}-{{ .Chart.Version }}"
+    svc: mqtrigger
+    messagequeue: kafka
+spec:
+  replicas: 1
+  selector:
+    matchLabels:
+      svc: mqtrigger
+      messagequeue: kafka
+  template:
+    metadata:
+      labels:
+        svc: mqtrigger
+        messagequeue: kafka
+    spec:
+      containers:
+      - name: mqtrigger
+      {{- if eq .Values.imageTag "" }}
+        image: "{{ .Values.image }}"
+      {{- else }}
+        image: "{{ .Values.image }}:{{ .Values.imageTag }}"
+      {{- end }}
+        imagePullPolicy: {{ .Values.pullPolicy }}
+        command: ["/fission-bundle"]
+        args: ["--mqt", "--routerUrl", "http://router.{{ .Release.Namespace }}"]
+        env:
+        - name: MESSAGE_QUEUE_TYPE
+          value: kafka
+        - name: MESSAGE_QUEUE_URL
+          value: "{{.Values.kafka.brokers}}"
+        - name: MESSAGE_QUEUE_KAFKA_VERSION
+          value: "{{.Values.kafka.version}}"
+        - name: DEBUG_ENV
+          value: {{ .Values.debugEnv | quote }}
+        - name: PPROF_ENABLED
+          value: {{ .Values.pprof.enabled | quote }}
+        {{- include "opentracing.envs" . | indent 8 }}
+        {{- include "opentelemtry.envs" . | indent 8 }}
+        # TLS authentication is TLS with authentication (2 way)
+        # More info: https://docs.confluent.io/current/kafka/authentication_ssl.html#ssl-overview
+        {{- if .Values.kafka.authentication.tls.enabled }}
+        - name: TLS_ENABLED
+          value: "true"
+        - name: MESSAGE_QUEUE_SECRETS
+          value: /etc/fission/secrets
+        - name: INSECURE_SKIP_VERIFY
+          value: "{{ .Values.kafka.authentication.tls.insecureSkipVerify }}"
+        volumeMounts:
+        - name: kafka-secrets
+          mountPath: /etc/fission/secrets
+        {{- end }}
+        {{- if .Values.terminationMessagePath }}
+        terminationMessagePath: {{ .Values.terminationMessagePath }}
+        {{- end }}
+        {{- if .Values.terminationMessagePolicy }}
+        terminationMessagePolicy: {{ .Values.terminationMessagePolicy }}
+        {{- end }}
+      serviceAccountName: fission-svc
+      {{- if .Values.kafka.authentication.tls.enabled }}
+      volumes:
+      - name: kafka-secrets
+        secret:
+          secretName: mqtrigger-kafka-secrets
+      {{- end }}
+
+---
+{{- if .Values.kafka.authentication.tls.enabled }}
+apiVersion: v1
+kind: Secret
+metadata:
+  name: mqtrigger-kafka-secrets
+  labels:
+    chart: "{{ .Chart.Name }}-{{ .Chart.Version }}"
+data:
+  {{- if .Files.Get  (printf "%s" .Values.kafka.authentication.tls.caCert) }}
+  caCert: {{ .Files.Get (printf "%s" .Values.kafka.authentication.tls.caCert) | b64enc }}
+  {{- else }}
+  {{ fail "Invalid chart. CA Certificate not found." }}
+  {{- end }}
+  {{- if .Files.Get (printf "%s" .Values.kafka.authentication.tls.userCert) }}
+  userCert: {{ .Files.Get (printf "%s" .Values.kafka.authentication.tls.userCert) | b64enc }}
+  {{- else }}
+  {{ fail "Invalid chart. User Certificate not found." }}
+  {{- end }}
+  {{- if .Files.Get (printf "%s" .Values.kafka.authentication.tls.userKey) }}
+  userKey: {{ .Files.Get (printf "%s" .Values.kafka.authentication.tls.userKey) | b64enc }}
+  {{- else }}
+  {{ fail "Invalid chart. User Key not found." }}
+  {{- end }}
+{{- end }}
+{{- if .Values.extraCoreComponentPodConfig }}
+{{ toYaml .Values.extraCoreComponentPodConfig | indent 6 -}}
+{{- end }}
+{{- end }}
@@ -0,0 +1,116 @@
+{{- if .Values.nats.enabled }}
+{{- if not .Values.nats.external }}
+apiVersion: v1
+kind: ServiceAccount
+metadata:
+  name: fission-nats-streaming
+  namespace: {{ .Release.Namespace }}
+---
+apiVersion: apps/v1
+kind: Deployment
+metadata:
+  labels:
+    svc: nats-streaming
+  name: nats-streaming
+spec:
+  replicas: 1
+  selector:
+    matchLabels:
+      svc: nats-streaming
+  template:
+    metadata:
+      labels:
+        svc: nats-streaming
+    spec:
+      serviceAccount: fission-nats-streaming
+      containers:
+      - name: nats-streaming
+        image: "{{ .Values.nats.streamingserver.image }}:{{ .Values.nats.streamingserver.tag }}"
+        imagePullPolicy: {{ .Values.pullPolicy }}
+        args: [
+          "--cluster_id", "{{ .Values.nats.clusterID }}",
+          "--auth", "{{ .Values.nats.authToken }}",
+          "--max_channels", "0",
+          "--http_port", "4223"
+        ]
+        ports:
+        - containerPort: 4222
+          protocol: TCP
+        - containerPort: 4223
+          protocol: TCP
+        readinessProbe:
+          httpGet:
+            path: "/streaming/serverz"
+            port: 4223
+          initialDelaySeconds: 30
+          periodSeconds: 1
+          failureThreshold: 30
+        livenessProbe:
+          httpGet:
+            path: "/streaming/serverz"
+            port: 4223
+          initialDelaySeconds: 30
+          periodSeconds: 5
+        {{- if .Values.terminationMessagePath }}
+        terminationMessagePath: {{ .Values.terminationMessagePath }}
+        {{- end }}
+        {{- if .Values.terminationMessagePolicy }}
+        terminationMessagePolicy: {{ .Values.terminationMessagePolicy }}
+        {{- end }}
+{{- if .Values.extraCoreComponentPodConfig }}
+{{ toYaml .Values.extraCoreComponentPodConfig | indent 6 -}}
+{{- end }}
+---
+{{- end }}
+apiVersion: apps/v1
+kind: Deployment
+metadata:
+  name: mqtrigger-nats-streaming
+  labels:
+    chart: "{{ .Chart.Name }}-{{ .Chart.Version }}"
+    svc: mqtrigger
+    messagequeue: nats-streaming
+spec:
+  replicas: 1
+  selector:
+    matchLabels:
+      svc: mqtrigger
+      messagequeue: nats-streaming
+  template:
+    metadata:
+      labels:
+        svc: mqtrigger
+        messagequeue: nats-streaming
+    spec:
+      containers:
+      - name: mqtrigger
+        image: {{ include "fission-bundleImage" . | quote }}
+        imagePullPolicy: {{ .Values.pullPolicy }}
+        command: ["/fission-bundle"]
+        args: ["--mqt", "--routerUrl", "http://router.{{ .Release.Namespace }}"]
+        env:
+        - name: MESSAGE_QUEUE_TYPE
+          value: nats-streaming
+        - name: MESSAGE_QUEUE_CLUSTER_ID
+          value: {{ .Values.nats.clusterID }}
+        - name: MESSAGE_QUEUE_QUEUE_GROUP
+          value: {{ .Values.nats.queueGroup }}
+        - name: MESSAGE_QUEUE_CLIENT_ID
+          value: {{ .Values.nats.clientID }}
+        - name: MESSAGE_QUEUE_URL
+        {{- if .Values.nats.authToken }}
+          value: nats://{{ .Values.nats.authToken }}@{{ .Values.nats.hostaddress }}
+        {{- else }}
+          value: nats://{{ .Values.nats.hostaddress }}
+        {{- end }}
+        - name: DEBUG_ENV
+          value: {{ .Values.debugEnv | quote }}
+        - name: PPROF_ENABLED
+          value: {{ .Values.pprof.enabled | quote }}
+        {{- include "opentracing.envs" . | indent 8 }}
+        {{- include "opentelemtry.envs" . | indent 8 }}
+      serviceAccountName: fission-svc
+{{- if .Values.extraCoreComponentPodConfig }}
+{{ toYaml .Values.extraCoreComponentPodConfig | indent 6 -}}
+{{- end }}
+{{- end }}
@@ -0,0 +1,19 @@
+{{- if and .Values.nats.enabled (not .Values.nats.external) }}
+apiVersion: v1
+kind: Service
+metadata:
+  name: nats-streaming
+  labels:
+    svc: nats-streaming
+    chart: "{{ .Chart.Name }}-{{ .Chart.Version }}"
+spec:
+  type: {{ .Values.serviceType }}
+  ports:
+  - port: 4222
+    targetPort: 4222
+{{- if eq .Values.serviceType "NodePort" }}
+    nodePort: {{ .Values.natsStreamingPort }}
+{{- end }}
+  selector:
+    svc: nats-streaming
+{{- end }}
@@ -0,0 +1,62 @@
+{{- if .Values.mqt_keda.enabled }}
+apiVersion: apps/v1
+kind: Deployment
+metadata:
+  name: mqtrigger-keda
+  labels:
+    chart: "{{ .Chart.Name }}-{{ .Chart.Version }}"
+    svc: mqtrigger-keda
+    messagequeue: keda
+spec:
+  replicas: 1
+  selector:
+    matchLabels:
+      svc: mqtrigger-keda
+      messagequeue: keda
+  template:
+    metadata:
+      labels:
+        svc: mqtrigger-keda
+        messagequeue: keda
+    spec:
+      containers:
+      - name:  mqtrigger-keda
+        image: {{ include "fission-bundleImage" . | quote }}
+        imagePullPolicy: {{ .Values.pullPolicy }}
+        command: ["/fission-bundle"]
+        args: ["--mqt_keda", "--routerUrl", "http://router.{{ .Release.Namespace }}"]
+        env:
+        - name: DEBUG_ENV
+          value: {{ .Values.debugEnv | quote }}
+        - name: CONNECTOR_IMAGE_PULL_POLICY
+          value: "{{ .Values.pullPolicy }}"
+        - name: KAFKA_IMAGE
+          value: "{{ .Values.mqt_keda.connector_images.kafka.image }}:{{ .Values.mqt_keda.connector_images.kafka.tag }}"
+        - name: RABBITMQ_IMAGE
+          value: "{{ .Values.mqt_keda.connector_images.rabbitmq.image }}:{{ .Values.mqt_keda.connector_images.rabbitmq.tag }}"
+        - name: AWS-KINESIS-STREAM_IMAGE
+          value: "{{ .Values.mqt_keda.connector_images.awskinesis.image }}:{{ .Values.mqt_keda.connector_images.awskinesis.tag }}"
+        - name: AWS-SQS-QUEUE_IMAGE
+          value: "{{ .Values.mqt_keda.connector_images.aws_sqs.image }}:{{ .Values.mqt_keda.connector_images.aws_sqs.tag }}"
+        - name: STAN_IMAGE
+          value: "{{ .Values.mqt_keda.connector_images.nats_steaming.image }}:{{ .Values.mqt_keda.connector_images.nats_steaming.tag }}"
+        - name: GCP-PUB-SUB_IMAGE
+          value: "{{ .Values.mqt_keda.connector_images.gcp_pub_sub.image }}:{{ .Values.mqt_keda.connector_images.gcp_pub_sub.tag }}"
+        - name: REDIS_IMAGE
+          value: "{{ .Values.mqt_keda.connector_images.redis.image }}:{{ .Values.mqt_keda.connector_images.redis.tag }}"
+        {{- include "opentracing.envs" . | indent 8 }}
+        {{- include "opentelemtry.envs" . | indent 8 }}
+        {{- if .Values.terminationMessagePath }}
+        terminationMessagePath: {{ .Values.terminationMessagePath }}
+        {{- end }}
+        {{- if .Values.terminationMessagePolicy }}
+        terminationMessagePolicy: {{ .Values.terminationMessagePolicy }}
+        {{- end }}
+      serviceAccountName: fission-svc
+{{- if .Values.priorityClassName }}
+      priorityClassName: {{ .Values.priorityClassName }}
+{{- end }}
+{{- if .Values.extraCoreComponentPodConfig }}
+{{ toYaml .Values.extraCoreComponentPodConfig | indent 6 -}}
+{{- end }}
+{{- end }}
@@ -1,45 +0,0 @@
-{{- if .Values.analytics }}
-apiVersion: batch/v1
-kind: Job
-metadata:
-  name: {{ template "fullname" . }}-{{ .Chart.Version }}
-  labels:
-    # The "release" convention makes it easy to tie a release to all of the
-    # Kubernetes resources that were created as part of that release.
-    release: {{ .Release.Name }}
-    # This makes it easy to audit chart usage.
-    chart: {{ .Chart.Name }}-{{ .Chart.Version }}
-    app: {{ template "name" . }}
-  annotations:
-    # This is what defines this resource as a hook. Without this line, the
-    # job is considered part of the release.
-    "helm.sh/hook": post-install
-    "helm.sh/hook-delete-policy": hook-succeeded
-spec:
-  template:
-    metadata:
-      name: {{ template "fullname" . }}
-      labels:
-        release: {{ .Release.Name }}
-        app: {{ template "name" . }}
-      annotations:
-        {{- if .Values.enableIstio }}
-        "sidecar.istio.io/inject": "false"
-        {{- end }}
-    spec:
-      restartPolicy: Never
-      containers:
-        - name: post-install-job
-        {{- if .Values.imageTag }}
-          image: {{ .Values.postInstallReportImage }}:{{ .Values.imageTag }}
-        {{- else }}
-          image: {{ .Values.postInstallReportImage }}
-        {{- end }}
-          imagePullPolicy: {{ .Values.pullPolicy }}
-          command: [ "/reporter" ]
-          args: ["event", "-c", "fission-use", "-a", "helm-post-install", "-l", "{{ .Chart.Name }}-{{ .Chart.Version }}"]
-          env:
-            - name: GA_TRACKING_ID
-              value: "{{ .Values.gaTrackingID }}"
-      serviceAccountName: fission-svc
-{{- end }}
@@ -1,45 +0,0 @@
-{{- if .Values.analytics }}
-apiVersion: batch/v1
-kind: Job
-metadata:
-  name: {{ template "fullname" . }}-{{ .Chart.Version }}
-  labels:
-    # The "release" convention makes it easy to tie a release to all of the
-    # Kubernetes resources that were created as part of that release.
-    release: {{ .Release.Name }}
-    # This makes it easy to audit chart usage.
-    chart: {{ .Chart.Name }}-{{ .Chart.Version }}
-    app: {{ template "name" . }}
-  annotations:
-    # This is what defines this resource as a hook. Without this line, the
-    # job is considered part of the release.
-    "helm.sh/hook": post-upgrade
-    "helm.sh/hook-delete-policy": hook-succeeded
-spec:
-  template:
-    metadata:
-      name: {{ template "fullname" . }}
-      labels:
-        release: {{ .Release.Name }}
-        app: {{ template "name" . }}
-      annotations:
-        {{- if .Values.enableIstio }}
-        "sidecar.istio.io/inject": "false"
-        {{- end }}
-    spec:
-      restartPolicy: Never
-      containers:
-        - name: post-upgrade-job
-        {{- if .Values.imageTag }}
-          image: {{ .Values.postInstallReportImage }}:{{ .Values.imageTag }}
-        {{- else }}
-          image: {{ .Values.postInstallReportImage }}
-        {{- end }}
-          imagePullPolicy: {{ .Values.pullPolicy }}
-          command: [ "/reporter" ]
-          args: ["event", "-c", "fission-use", "-a", "helm-post-upgrade", "-l", "{{ .Chart.Name }}-{{ .Chart.Version }}"]
-          env:
-            - name: GA_TRACKING_ID
-              value: "{{ .Values.gaTrackingID }}"
-      serviceAccountName: fission-svc
-{{- end }}
@@ -1,3 +1,4 @@
+{{- if .Values.preUpgradeChecks.enabled }}
 apiVersion: batch/v1
 kind: Job
 metadata:
@@ -26,12 +27,19 @@ spec:
      restartPolicy: Never
      containers:
      - name: pre-upgrade-job
-      {{- if .Values.imageTag }}
-        image: {{ .Values.preUpgradeChecksImage }}:{{ .Values.imageTag }}
+      {{- if .Values.preUpgradeChecks.imageTag }}
+        image: {{ .Values.preUpgradeChecks.image }}:{{ .Values.preUpgradeChecks.imageTag }}
      {{- else }}
-        image: {{ .Values.preUpgradeChecksImage }}
+        image: {{ .Values.preUpgradeChecks.image }}
      {{- end }}
        imagePullPolicy: {{ .Values.pullPolicy }}
        command: [ "/pre-upgrade-checks" ]
        args: ["--fn-pod-namespace", "{{ .Values.functionNamespace }}", "--envbuilder-namespace", "{{ .Values.builderNamespace }}"]
+        {{- if .Values.terminationMessagePath }}
+        terminationMessagePath: {{ .Values.terminationMessagePath }}
+        {{- end }}
+        {{- if .Values.terminationMessagePolicy }}
+        terminationMessagePolicy: {{ .Values.terminationMessagePolicy }}
+        {{- end }}
      serviceAccountName: fission-svc
+{{- end }}
@@ -89,7 +89,22 @@ spec:
        - containerPort: 6060
          name: pprof
        {{- end }}
+        {{- if .Values.router.terminationMessagePath }}
+        terminationMessagePath: {{ .Values.router.terminationMessagePath }}
+        {{- else if .Values.terminationMessagePath }}
+        terminationMessagePath: {{ .Values.terminationMessagePath }}
+        {{- end }}
+        {{- if .Values.router.terminationMessagePolicy }}
+        terminationMessagePolicy: {{ .Values.router.terminationMessagePolicy }}
+        {{- else if .Values.terminationMessagePolicy }}
+        terminationMessagePolicy: {{ .Values.terminationMessagePolicy }}
+        {{- end }}
      serviceAccountName: fission-svc
+{{- if .Values.router.priorityClassName }}
+      priorityClassName: {{ .Values.router.priorityClassName }}
+{{- else if .Values.priorityClassName }}
+      priorityClassName: {{ .Values.priorityClassName }}
+{{- end }}
 {{- if .Values.router.extraCoreComponentPodConfig }}
 {{ toYaml .Values.router.extraCoreComponentPodConfig | indent 6 -}}
 {{- else }}
@@ -0,0 +1,22 @@
+apiVersion: v1
+kind: Service
+metadata:
+  name: router
+  labels:
+    svc: router
+    application: fission-router
+    chart: "{{ .Chart.Name }}-{{ .Chart.Version }}"
+{{- if .Values.router.svcAnnotations }}
+  annotations:
+{{ toYaml .Values.router.svcAnnotations | indent 4 }}
+{{- end }}
+spec:
+  type: {{ .Values.routerServiceType }}
+  ports:
+  - port: 80
+    targetPort: 8888
+{{- if eq .Values.routerServiceType "NodePort" }}
+    nodePort: {{ .Values.routerPort }}
+{{- end }}
+  selector:
+    svc: router
@@ -0,0 +1,101 @@
+apiVersion: apps/v1
+kind: Deployment
+metadata:
+  name: storagesvc
+  labels:
+    chart: "{{ .Chart.Name }}-{{ .Chart.Version }}"
+    svc: storagesvc
+    application: fission-storage
+spec:
+  replicas: 1
+  selector:
+    matchLabels:
+      svc: storagesvc
+      application: fission-storage
+  template:
+    metadata:
+      labels:
+        svc: storagesvc
+        application: fission-storage
+    spec:
+      containers:
+      - name: storagesvc
+        image: {{ include "fission-bundleImage" . | quote }}
+        imagePullPolicy: {{ .Values.pullPolicy }}
+        command: ["/fission-bundle"]
+        {{- if and (.Values.persistence.enabled) (eq (.Values.persistence.storageType | default "local") "s3") }}
+        args: ["--storageServicePort", "8000", "--storageType", "s3"]
+        {{- else }}
+        args: ["--storageServicePort", "8000", "--storageType", "local"]
+        {{- end }}
+        env:
+        - name: PRUNE_INTERVAL
+          value: "{{.Values.pruneInterval}}"
+        - name: DEBUG_ENV
+          value: {{ .Values.debugEnv | quote }}
+        - name: PPROF_ENABLED
+          value: {{ .Values.pprof.enabled | quote }}
+        {{- if and (.Values.persistence.enabled) (eq (.Values.persistence.storageType | default "local") "s3") }}
+        - name: STORAGE_S3_ENDPOINT
+          value: {{ .Values.persistence.s3.endPoint }}
+        - name: STORAGE_S3_BUCKET_NAME
+          value: {{ .Values.persistence.s3.bucketName }}
+        - name: STORAGE_S3_SUB_DIR
+          value: {{ .Values.persistence.s3.subDir }}
+        - name: STORAGE_S3_ACCESS_KEY_ID
+          value: {{ .Values.persistence.s3.accessKeyId }}
+        - name: STORAGE_S3_SECRET_ACCESS_KEY
+          value: {{ .Values.persistence.s3.secretAccessKey }}
+        - name: STORAGE_S3_REGION
+          value: {{ .Values.persistence.s3.region }}
+        {{- end }}
+        {{- include "opentracing.envs" . | indent 8 }}
+        {{- include "opentelemtry.envs" . | indent 8 }}
+        {{- if ne (.Values.persistence.storageType | default "local") "s3" }}
+        volumeMounts:
+        - name: fission-storage
+          mountPath: /fission
+        {{- end }}
+        readinessProbe:
+          httpGet:
+            path: "/healthz"
+            port: 8000
+          initialDelaySeconds: 1
+          periodSeconds: 1
+          failureThreshold: 30
+        livenessProbe:
+          httpGet:
+            path: "/healthz"
+            port: 8000
+          initialDelaySeconds: 35
+          periodSeconds: 5
+        ports:
+          - containerPort: 8000
+            name: http
+          {{- if .Values.pprof.enabled }}
+          - containerPort: 6060
+            name: pprof
+          {{- end }}
+        {{- if .Values.terminationMessagePath }}
+        terminationMessagePath: {{ .Values.terminationMessagePath }}
+        {{- end }}
+        {{- if .Values.terminationMessagePolicy }}
+        terminationMessagePolicy: {{ .Values.terminationMessagePolicy }}
+        {{- end }}
+      serviceAccountName: fission-svc
+      {{- if and (.Values.persistence.enabled) (ne (.Values.persistence.storageType | default "local") "s3") }}
+      volumes:
+      - name: fission-storage
+        persistentVolumeClaim:
+          claimName: {{ .Values.persistence.existingClaim | default "fission-storage-pvc" }}
+      {{- else }}
+      volumes:
+      - name: fission-storage
+        emptyDir: {}
+      {{- end }}
+{{- if .Values.priorityClassName }}
+      priorityClassName: {{ .Values.priorityClassName }}
+{{- end }}
+{{- if .Values.extraCoreComponentPodConfig }}
+{{ toYaml .Values.extraCoreComponentPodConfig | indent 6 -}}
+{{- end }}
@@ -0,0 +1,15 @@
+apiVersion: v1
+kind: Service
+metadata:
+  name: storagesvc
+  labels:
+    svc: storagesvc
+    application: fission-storage
+    chart: "{{ .Chart.Name }}-{{ .Chart.Version }}"
+spec:
+  type: ClusterIP
+  ports:
+    - port: 80
+      targetPort: 8000
+  selector:
+    svc: storagesvc
@@ -1,95 +0,0 @@
-apiVersion: v1
-kind: Service
-metadata:
-  name: router
-  labels:
-    svc: router
-    application: fission-router
-    chart: "{{ .Chart.Name }}-{{ .Chart.Version }}"
-{{- if .Values.router.svcAnnotations }}
-  annotations:
-{{ toYaml .Values.router.svcAnnotations | indent 4 }}
-{{- end }}
-spec:
-  type: {{ .Values.routerServiceType }}
-  ports:
-  - port: 80
-    targetPort: 8888
-{{- if eq .Values.routerServiceType "NodePort" }}
-    nodePort: {{ .Values.routerPort }}
-{{- end }}
-  selector:
-    svc: router
-
---
-apiVersion: v1
-kind: Service
-metadata:
-  name: controller
-  labels:
-    svc: controller
-    application: fission-api
-    chart: "{{ .Chart.Name }}-{{ .Chart.Version }}"
-spec:
-  type: {{ .Values.serviceType }}
-  ports:
-  - port: 80
-    targetPort: 8888
-{{- if eq .Values.serviceType "NodePort" }}
-    nodePort: {{ .Values.controllerPort }}
-{{- end }}
-  selector:
-    svc: controller
-
-{{- if and .Values.nats.enabled (not .Values.nats.external) }}
---
-apiVersion: v1
-kind: Service
-metadata:
-  name: nats-streaming
-  labels:
-    svc: nats-streaming
-    chart: "{{ .Chart.Name }}-{{ .Chart.Version }}"
-spec:
-  type: {{ .Values.serviceType }}
-  ports:
-  - port: 4222
-    targetPort: 4222
-{{- if eq .Values.serviceType "NodePort" }}
-    nodePort: {{ .Values.natsStreamingPort }}
-{{- end }}
-  selector:
-    svc: nats-streaming
-{{- end }}
---
-apiVersion: v1
-kind: Service
-metadata:
-  name: storagesvc
-  labels:
-    svc: storagesvc
-    application: fission-storage
-    chart: "{{ .Chart.Name }}-{{ .Chart.Version }}"
-spec:
-  type: ClusterIP
-  ports:
-  - port: 80
-    targetPort: 8000
-  selector:
-    svc: storagesvc
-
---
-apiVersion: v1
-kind: Service
-metadata:
-  name: executor
-  labels:
-    svc: executor
-    chart: "{{ .Chart.Name }}-{{ .Chart.Version }}"
-spec:
-  type: ClusterIP
-  ports:
-    - port: 80
-      targetPort: 8888
-  selector:
-    svc: executor
@@ -0,0 +1,43 @@
+apiVersion: apps/v1
+kind: Deployment
+metadata:
+  name: timer
+  labels:
+    chart: "{{ .Chart.Name }}-{{ .Chart.Version }}"
+    svc: timer
+spec:
+  replicas: 1
+  selector:
+    matchLabels:
+      svc: timer
+  template:
+    metadata:
+      labels:
+        svc: timer
+    spec:
+      containers:
+      - name: timer
+        image: {{ include "fission-bundleImage" . | quote }}
+        imagePullPolicy: {{ .Values.pullPolicy }}
+        command: ["/fission-bundle"]
+        args: ["--timer", "--routerUrl", "http://router.{{ .Release.Namespace }}"]
+        env:
+        - name: DEBUG_ENV
+          value: {{ .Values.debugEnv | quote }}
+        - name: PPROF_ENABLED
+          value: {{ .Values.pprof.enabled | quote }}
+        {{- include "opentracing.envs" . | indent 8 }}
+        {{- include "opentelemtry.envs" . | indent 8 }}
+        {{- if .Values.terminationMessagePath }}
+        terminationMessagePath: {{ .Values.terminationMessagePath }}
+        {{- end }}
+        {{- if .Values.terminationMessagePolicy }}
+        terminationMessagePolicy: {{ .Values.terminationMessagePolicy }}
+        {{- end }}
+      serviceAccountName: fission-svc
+      {{- if .Values.priorityClassName }}
+      priorityClassName: {{ .Values.priorityClassName }}
+      {{- end }}
+{{- if .Values.extraCoreComponentPodConfig }}
+{{ toYaml .Values.extraCoreComponentPodConfig | indent 6 -}}
+{{- end }}
@@ -1,115 +1,173 @@
-#
-# Fission chart configuration
-#
+## Fission chart configuration
+##

-## Kubernetes configuration
-## For minikube, set this to NodePort, elsewhere use LoadBalancer or ClusterIP.
+## serviceType to consider while creating Fission Controller service.
+## For minikube/kind, set this to NodePort, elsewhere use LoadBalancer or ClusterIP.
+##
 serviceType: ClusterIP

+## routerServiceType to consider while creating Fission Router service.
 ## For minikube, set this to NodePort, elsewhere use LoadBalancer or ClusterIP.
+##
 routerServiceType: LoadBalancer

-## Image base repository
-## Leave it empty for using existing local image
+## repository represents base repository for images used in the chart.
+## Keep it empty for using existing local image
+##
 repository: index.docker.io

-## Fission image repository
+## image represents the base image fission-bundle used by multiple Fission components.
+## We alter arguments to the image to run a particular component.
+##
 image: fission/fission-bundle

-## Image pull policy
+## imageTag represents the tag of the base image fission-bundle used by multiple Fission components.
+## It is also used by the chart to identify version of the few more images apart from fission-bundle.
+## Keep it empty for using latest tag.
+##
+imageTag: v1.15.0
+
+## pullPolicy represents the pull policy to use for images in the chart.
+##
 pullPolicy: IfNotPresent

-## Fission image version
-imageTag: v1.15.0-rc1
+## priorityClassName represents the priority class name to use for Fission components.
+## Refer to https://kubernetes.io/docs/concepts/scheduling-eviction/pod-priority-preemption/
+## executor.priorityClassName takes precedence over this value for executor.
+## router.priorityClassName takes precedence over this value for router.
+##
+priorityClassName: ""

-## Port at which Fission controller service should be exposed
+## terminationMessagePath is the path at which the pod termination message will be written.
+## executor.terminationMessagePath takes precedence over this value for executor.
+## router.terminationMessagePath takes precedence over this value for router.
+##
+terminationMessagePath: /dev/termination-log
+
+## terminationMessagePolicy is the policy for the termination message.
+## executor.terminationMessagePolicy takes precedence over this value for executor.
+## router.terminationMessagePolicy takes precedence over this value for router.
+##
+terminationMessagePolicy: File
+
+## controllerPort represents the port at which the Fission controller service should be exposed.
+##
 controllerPort: 31313

-## Port at which Fission router service should be exposed
+## routerPort represents the port at which the Fission Router service should be exposed.
+##
 routerPort: 31314

-## Port at which NATS streaming service should be exposed
-## (only if nats enabled and not external)
-natsStreamingPort: 31316
-
-## Set to false if you create the namespaces manually
-createNamespace: true
-
-## Namespace in which to run fission functions (this is different from
-## the release namespace)
+## functionNamespace represents the namespace in which Fission Function resources will be created.
+## This is different from the release namespace.
+##
 functionNamespace: fission-function

-## Namespace in which to run fission builders (this is different from
-## the release namespace)
+## builderNamespace represents the namespace in which Fission Builder resources will be created.
+## This is different from the release namespace.
+##
 builderNamespace: fission-builder

-## Enable istio integration
+## createNamespace decides to create namespaces by the chart.
+## If set to true, functionNamespace and builderNamespace namespaces mentioned above will be created by the chart.
+## Set to false if you want to create the namespaces manually.
+##
+createNamespace: true
+
+## enableIstio indicates whether to enable istio integration.
+##
 enableIstio: false

+## fetcher is a light weight component that helps in running functions.
+## fetcher helps in fetching function source code/build and uploading it when function is invoked.
+##
 fetcher:
-  ## Fetcher repository
+  ## image represents the image of the fetcher component.
  image: fission/fetcher
-  ## Fetcher image version
-  imageTag: v1.15.0-rc1
+  ## imageTag represents the tag of the image of the fetcher component.
+  imageTag: v1.15.0

  ## Fetcher is only for to downloading or uploading archive.
  ## Normally, you don't need to change the value here, unless necessary.
+  ##
  resource:
+    ## cpu represents the cpu resource required by the fetcher component.
+    ##
    cpu:
      requests: "10m"
      ## Low CPU limits will increases the function specialization time.
      limits: ""
+    ## mem represents the memory resource required by the fetcher component.
+    ##
    mem:
      requests: "16Mi"
      limits: ""

-## Logger config
-logger:
-  influxdbAdmin: "admin"
-  fluentdImageRepository: index.docker.io
-  fluentdImage: fluent/fluent-bit
-  fluentdImageTag: 1.5.1
-
-  ## Fluent-bit writes/reads it’s own sqlite database to record a history of tracked
-  ## files and a state of offsets, this is very useful to resume a state if the ser-
-  ## vice is restarted. For Kubernetes environment with constraints like OpenShift,
-  ## the containers are limited to write hostPath volume. Hence, we have to enable
-  ## security context and set privileged to true.
-  enableSecurityContext: false
-
-  ## Enable PodSecurityPolicies to allow privileged container
-  ## Only required in some clusters and when enableSecurityContext is true
-  podSecurityPolicy:
-    enabled: false
-
-    ## Configure additional capabilities
-    additionalCapabilities:
-    # example values for linkerd
-    #- NET_RAW
-    #- NET_ADMIN
-
+## executor is responsible for providing resources to your functions.
+##
 executor:
+  ## executor priorityClassName
+  ## Ref. https://kubernetes.io/docs/concepts/scheduling-eviction/pod-priority-preemption/
+  ## Recommended to use system-cluster-critical for executor pods.
+  ##
+  priorityClassName: ""
+  ## terminationMessagePath is the path at which the file to which the executor will write a message upon termination.
+  ##
+  terminationMessagePath: ""
+  ## terminationMessagePolicy is the policy for the executor termination message.
+  ##
+  terminationMessagePolicy: ""
+  ## adoptExistingResources decides whether to adopt existing resources when executor restarts or Fission is redeployed.
+  ##
  adoptExistingResources: false
+  ## podReadyTimeout represents the timeout in seconds for waiting for pod to become ready.
+  ## This is applicable to Pool Manager executor type only.
+  ##
  podReadyTimeout: 300s

-## Router config
+## router is responsible for routing function calls to the appropriate function.
+##
 router:
+  ## router priorityClassName
+  ## Ref. https://kubernetes.io/docs/concepts/scheduling-eviction/pod-priority-preemption/
+  ## Recommended to use system-cluster-critical for router pods.
+  ##
+  priorityClassName: ""
+  ## terminationMessagePath is the path at which the file to which the router will write a message upon termination.
+  ##
+  terminationMessagePath: ""
+  ## terminationMessagePolicy is the policy for the router termination message.
+  ##
+  terminationMessagePolicy: ""
+  ## deployAsDaemonSet decides whether to deploy router as a DaemonSet or a Deployment.
+  ##
  deployAsDaemonSet: false
+  ## svcAddressMaxRetries is the max times for router to retry with a specific function service address
+  ##
  svcAddressMaxRetries: 5
+  ## svcAddressUpdateTimeout is the timeout setting for a goroutine to wait for the update of a service entry.
+  ##
  svcAddressUpdateTimeout: 30s
+  ## unTapServiceTimeout is the timeout used in the request context of unTapService.
+  ## unTapService is called to free up the resources once the function invocation is done.
+  ##
  unTapServiceTimeout: 3600s
-  ## Display endpoint access logs
-  ## To be aware of enabling logging endpoint access log, it increases
+  ## displayAccessLog display endpoing access logs
+  ## Please be aware of enabling logging endpoint access log, it increases
  ## router resource utilization when under heavy workloads.
+  ##
  displayAccessLog: false

-  ## Add annotations for router
+  ## svcAnnotations is the annotations to be added to the service resource created for router.
+  ##
  # svcAnnotations:
  #   cloud.google.com/load-balancer-type: Internal

-  ## For router to match encoded path.
+  ## useEncodedPath decideds to match encoded path.
  ## If true, "/foo%2Fbar" will match the path "/{var}";
  ## Otherwise, it will match the path "/foo/bar".
+  ## For details, see: https://github.com/fission/fission/issues/1317
+  ##
  useEncodedPath: false

  roundTrip:
@@ -124,23 +182,25 @@ router:
    ## so that kubernetes will be able to reap old function pod quickly.
    ##
    ## For details, see https://github.com/fission/fission/issues/723
+    ##
    disableKeepAlive: false

-    ## The keep-alive period for an active network connection to function pod.
+    ## keepAliveTime is period for an active network connection to function pod.
+    ##
    keepAliveTime: 30s

-    ## HTTP transport request timeout
+    ## timeout is HTTP transport request timeout
+    ##
    timeout: 50ms

    ## The length of request timeout will multiply with timeoutExponent after each retry
+    ##
    timeoutExponent: 2

-    ## Max retries times of a failed request
+    ## maxRetries defines no of retries of a failed request
+    ##
    maxRetries: 10

-  ## Sample with a rate per time window (traces/second)
-  traceSamplingRate: 0.5
-
  ## Extend the container specs for the core fission pods.
  ## Can be used to add things like affinty/tolerations/nodeSelectors/etc.
  ## For example:
@@ -154,79 +214,107 @@ router:
  ##               operator: In
  ##               values:
  ##                 - app
+  ##
  #extraCoreComponentPodConfig:
  #  affinity:
  #  tolerations:
  #  nodeSelector:

-  # Pod resources as:
-  #  resources:
-  #    limits:
-  #      cpu: <tbd>
-  #      memory: <tbd>
-  #    requests:
-  #      cpu: <tbd>
-  #      memory: <tbd>
+  ## Pod resources as:
+  ##  resources:
+  ##    limits:
+  ##      cpu: <tbd>
+  ##      memory: <tbd>
+  ##    requests:
+  ##      cpu: <tbd>
+  ##      memory: <tbd>
+  ##
  resources: {}

 ## Message queue trigger config
-### NATS Streaming, enabled by default
+## NATS Streaming, enabled by default
+##
 nats:
-  # whether or not to use NATS
-  enabled: true
+  ## whether or not to use NATS
+  ##
+  enabled: false

-  # if true, don't install NATS, but
+  ## if true, don't install NATS, but
+  ## use the existing NATS cluster
+  ##
  external: false

-  # Address of NATS server (domain:port)
-  # change from default for external NATS
+  ## Address of NATS server (domain:port)
+  ## change from default for external NATS
+  ##
  hostaddress: "nats-streaming:4222"

-  # Authorization token to use with NATS
+  ## Authorization token to use with NATS
+  ##
  authToken: "defaultFissionAuthToken"

-  # NATS streaming clusterID
+  ## NATS streaming clusterID
+  ##
  clusterID: "fissionMQTrigger"

-  # Client name registered with NATS streaming
+  ## Client name registered with NATS streaming
+  ##
  clientID: "fission"

-  # Queue group registered with NATS streaming
+  ## Queue group registered with NATS streaming
+  ##
  queueGroup: "fission-messageQueueNatsTrigger"

-  # The image to use for NATS streaming server
+  ## The image to use for NATS streaming server
+  ##
  streamingserver:
    image: nats-streaming
+    tag: "0.23.0"
+
+## Port at which NATS streaming service should be exposed
+## (only if nats enabled and not external)
+##
+natsStreamingPort: 31316

 ## Azure-storage-queue: enable and configure the details
+##
 azureStorageQueue:
  enabled: false
  key: ""
  accountName: ""

 ## Kafka: enable and configure the details
+##
 kafka:
  enabled: false
-  # note: below link is only for reference.
-  # Please use the brokers link for your kafka here.
+  ## note: below link is only for reference.
+  ## Please use the brokers link for your kafka here.
+  ##
  brokers: "broker.kafka:9092" # or your-bootstrap-server.kafka:9092/9093
+  ## Sample config for authentication
+  ## authentication:
+  ##   tls:
+  ##     enabled: true
+  ##     caCert: 'auth/kafka/ca.crt'
+  ##     userCert: 'auth/kafka/user.crt'
+  ##     userKey: 'auth/kafka/user.key'
+  ##
  authentication:
    tls:
      enabled: false
-      # InsecureSkipVerify controls whether a client verifies the server's certificate chain and host name.
-      insecureSkipVerify: false # Warning: Setting this to true, makes TLS susceptible to man-in-the-middle attacks
-      caCert: "" # path to certificate containing public key of CA authority
-      userCert: "" # path to certificate containing public key of the user signed by CA authority
-      userKey: "" # path to private key of the user
-
-  # brokers: 'my-broker.kafka:9092' # or my-bootstrap-server.kafka:9092/9093
-  # Sample config for authentication
-  #   authentication:
-  #   tls:
-  #     enabled: true
-  #     caCert: 'auth/kafka/ca.crt'
-  #     userCert: 'auth/kafka/user.crt'
-  #     userKey: 'auth/kafka/user.key'
+      ## InsecureSkipVerify controls whether a client verifies the server's certificate chain and host name.
+      ## Warning: Setting this to true, makes TLS susceptible to man-in-the-middle attacks
+      ##
+      insecureSkipVerify: false
+      ## path to certificate containing public key of CA authority
+      ##
+      caCert: ""
+      ## path to certificate containing public key of the user signed by CA authority
+      ##
+      userCert: ""
+      ## path to private key of the user
+      ##
+      userKey: ""

  ## version of Kafka broker
  ## For 0.x it must be a string in the format
@@ -234,9 +322,11 @@ kafka:
  ## For 1.x it must be a string in the format
  ## "major.major.veryMinor" example: 2.0.1
  ## Should be >= 0.11.2.0 to enable Kafka record headers support
+  ##
  # version: "0.11.2.0"

 ## Persist data to a persistent volume.
+##
 persistence:
  ## If true, fission will create/use a Persistent Volume Claim unless storageType is set to s3
  ## If false, use emptyDir
@@ -245,15 +335,17 @@ persistence:

  ## Must be set to either local or S3.
  ## If storateType is set(other than local), one of its backend configuration must be set as below.
+  ##
  #storageType: local | s3

-  ## Sample configruation for AWS s3 storage backend
-  #s3:
-  # bucketName: <awsBucketName>
-  # subDir: <sub directory within a bucket>
-  # accessKeyId: <awsAccessKeyId>
-  # secretAccessKey: <awsSecretAccessKey>
-  # region: <awsRegion>
+  ## Sample configuration for AWS s3 storage backend
+  ##
+  # s3:
+  #   bucketName: <awsBucketName>
+  #   subDir: <sub directory within a bucket>
+  #   accessKeyId: <awsAccessKeyId>
+  #   secretAccessKey: <awsSecretAccessKey>
+  #   region: <awsRegion>

  ## A manually managed Persistent Volume Claim name
  ## Requires persistence.enabled: true
@@ -285,6 +377,7 @@ persistence:
 ##               operator: In
 ##               values:
 ##                 - app
+##
 #extraCoreComponentPodConfig:
 #  affinity:
 #  tolerations:
@@ -292,109 +385,168 @@ persistence:

 ## Analytics let us count how many people installed fission. Set to
 ## false to disable analytics.
+##
 analytics: true

 ## Internally used for generating an analytics job for non-helm installs
+##
 analyticsNonHelmInstall: false

 ## Google Analytics Tracking ID
+##
 gaTrackingID: UA-196546703-1

-## Enable Heapster only in clusters where heapster does not exist already
-heapster: false
+## Logger config
+## This would be used if influxdb is enabled
+##
+logger:
+  influxdbAdmin: "admin"
+  fluentdImageRepository: index.docker.io
+  fluentdImage: fluent/fluent-bit
+  fluentdImageTag: 1.8.8
+
+  ## Fluent-bit writes/reads it’s own sqlite database to record a history of tracked
+  ## files and a state of offsets, this is very useful to resume a state if the ser-
+  ## vice is restarted. For Kubernetes environment with constraints like OpenShift,
+  ## the containers are limited to write hostPath volume. Hence, we have to enable
+  ## security context and set privileged to true.
+  ##
+  enableSecurityContext: false
+
+  ## Enable PodSecurityPolicies to allow privileged container
+  ## Only required in some clusters and when enableSecurityContext is true
+  ##
+  podSecurityPolicy:
+    enabled: false
+
+    ## Configure additional capabilities
+    ##
+    additionalCapabilities:
+    # example values for linkerd
+    #- NET_RAW
+    #- NET_ADMIN

 ## Enable InfluxDB
+##
 influxdb:
-  enabled: true
-  image: influxdb:1.7
+  enabled: false
+  image: influxdb:1.8

-# Allow user to override busybox image used in fluent-bit init container
+## Allow user to override busybox image used in fluent-bit init container
+##
 busyboxImage: busybox

 ## Archive pruner is a garbage collector for archives on the fission storage service.
 ## This interval configures the frequency at which it runs inside the storagesvc pod.
 ## The value is in minutes.
+##
 pruneInterval: 60

-## Fission pre-install/pre-upgrade checks live in this image
-preUpgradeChecksImage: fission/pre-upgrade-checks
+preUpgradeChecks:
+  ## Run pre-install/pre-upgrade checks if true
+  ##
+  enabled: true
+  ## pre-install/pre-upgrade checks live in this image
+  ##
+  image: fission/pre-upgrade-checks
+  ## pre-install/pre-upgrade checks image version
+  ##
+  imageTag: v1.15.0

-## Fission ppost-install/post-upgrade reporting live in this image
+## Fission post-install/post-upgrade reporting live in this image
+##
 postInstallReportImage: fission/reporter

-## if there are any pod specialization errors when a function is triggered and this flag is set to true, the error
-## summary is returned as part of http response
+## If there are any pod specialization errors when a function is triggered, the error
+## summary is returned as part of http response if this is set to true.
+##
 debugEnv: false

 ## Prometheus for scrapping service metrics
+##
 prometheus:
  ## set this flag to true if prometheus needs to be deployed along with fission
-  enabled: true
+  ##
+  enabled: false

  ## If enabled is false, please assign the prometheus service URL
  ## that is accessible by components.
+  ##
  serviceEndpoint: ""

-## set this flag to false if you dont need canary deployment feature
+## set this flag to true if you need canary deployment feature
+##
 canaryDeployment:
-  enabled: true
+  enabled: false

-# Use the following flags to enable OpenTracing.
-# Note: OpenTracing support will be removed in an upcoming release.
-# Please prefer using OpenTelemetry instead.
+## Use the following flags to enable OpenTracing.
+## Note: OpenTracing support will be removed in an upcoming release.
+## Please prefer using OpenTelemetry instead.
+##
 openTracing:
  ## set this flag to true if you wish to enable OpenTracing
+  ##
  enabled: false

  ## if enabled is true, the variable is endpoint of Jaeger collector in the format shown below
+  ##
  #collectorEndpoint: "http://jaeger-collector.jaeger.svc:14268/api/traces?format=jaeger.thrift"

  ## uniformly sample traces with the given probabilistic sampling rate
+  ##
  #samplingRate: 0.75

-# It is an alternate to OpenTracing.
+## OpenTelemetry is a set of tools for collecting, analyzing, and visualizing
+## distributed tracing data across function calls.
+##
 openTelemetry:
-  # Use this flag to set the collector endpoint for OpenTelemetry.
-  # The variable is endpoint of the collector in the format shown below.
-  # otlpCollectorEndpoint: "otel-collector.observability.svc:4317"
+  ## Use this flag to set the collector endpoint for OpenTelemetry.
+  ## The variable is endpoint of the collector in the format shown below.
+  ## otlpCollectorEndpoint: "otel-collector.observability.svc:4317"
+  ##
  otlpCollectorEndpoint: ""
-  # Set this flag to false if you are using secure endpoint for the collector.
+  ## Set this flag to false if you are using secure endpoint for the collector.
+  ##
  otlpInsecure: true
-  # Key-value pairs to be used as headers associated with gRPC or HTTP requests
-  # to the collector.
-  # Eg. otlpHeaders: "key1=value1,key2=value2"
+  ## Key-value pairs to be used as headers associated with gRPC or HTTP requests to the collector.
+  ## Eg. otlpHeaders: "key1=value1,key2=value2"
+  ##
  otlpHeaders: ""
-  # Supported samplers:
-  # always_on - Sampler that always samples spans, regardless of the parent span's sampling decision.
-  # always_off - Sampler that never samples spans, regardless of the parent span's sampling decision.
-  # traceidratio - Sampler that samples probabalistically based on rate.
-  # parentbased_always_on - (default if empty) Sampler that respects its parent span's sampling decision, but otherwise always samples.
-  # parentbased_always_off - Sampler that respects its parent span's sampling decision, but otherwise never samples.
-  # parentbased_traceidratio - Sampler that respects its parent span's sampling decision, but otherwise samples probabalistically based on rate.
+  ## Supported samplers:
+  ## always_on - Sampler that always samples spans, regardless of the parent span's sampling decision.
+  ## always_off - Sampler that never samples spans, regardless of the parent span's sampling decision.
+  ## traceidratio - Sampler that samples probabalistically based on rate.
+  ## parentbased_always_on - (default if empty) Sampler that respects its parent span's sampling decision, but otherwise always samples.
+  ## parentbased_always_off - Sampler that respects its parent span's sampling decision, but otherwise never samples.
+  ## parentbased_traceidratio - Sampler that respects its parent span's sampling decision, but otherwise samples probabalistically based on rate.
+  ##
  tracesSampler: "parentbased_traceidratio"
-  # Each Sampler type defines its own expected input, if any.
-  # Currently we get trace ratio for the case of,
-  # 1. traceidratio
-  # 2. parentbased_traceidratio
-  # Sampling probability, a number in the [0..1] range, e.g. "0.1". Default is 0.1.
+  ## Each Sampler type defines its own expected input, if any.
+  ## Currently we get trace ratio for the case of,
+  ## 1. traceidratio
+  ## 2. parentbased_traceidratio
+  ## Sampling probability, a number in the [0..1] range, e.g. "0.1". Default is 0.1.
+  ##
  tracesSamplingRate: "0.1"
-  # Supported providers:
-  # tracecontext - W3C Trace Context
-  # baggage - W3C Baggage
-  # b3 - B3 Single
-  # b3multi - B3 Multi
-  # jaeger - Jaeger uber-trace-id header
-  # xray - AWS X-Ray (third party)
-  # ottrace - OpenTracing Trace (third party)
+  ## Supported providers:
+  ## tracecontext - W3C Trace Context
+  ## baggage - W3C Baggage
+  ## b3 - B3 Single
+  ## b3multi - B3 Multi
+  ## jaeger - Jaeger uber-trace-id header
+  ## xray - AWS X-Ray (third party)
+  ## ottrace - OpenTracing Trace (third party)
+  ##
  propagators: "tracecontext,baggage"

 ## Message Queue Trigger Kind, KEDA: enable and configuration
+##
 mqt_keda:
  enabled: true
  connector_images:
    kafka:
      image: fission/keda-kafka-http-connector
-      tag: v0.8
+      tag: v0.9
    rabbitmq:
      image: fission/keda-rabbitmq-http-connector
      tag: v0.8
@@ -414,6 +566,7 @@ mqt_keda:
      image: fission/keda-redis-http-connector
      tag: v0.1

-## Enable Pprof based profiling
+## Enable Pprof based profiling used mostly by Fission developers
+##
 pprof:
  enabled: false
@@ -1,21 +0,0 @@
-# Patterns to ignore when building packages.
-# This supports shell glob matching, relative path matching, and
-# negation (prefixed with !). Only one pattern per line.
-.DS_Store
-# Common VCS dirs
-.git/
-.gitignore
-.bzr/
-.bzrignore
-.hg/
-.hgignore
-.svn/
-# Common backup files
-*.swp
-*.bak
-*.tmp
-*~
-# Various IDEs
-.project
-.idea/
-*.tmproj
@@ -1,6 +0,0 @@
-dependencies:
- name: prometheus
-  repository: https://prometheus-community.github.io/helm-charts
-  version: 13.2.1
-digest: sha256:136360a97bdc11f1933d75bab77728acc75dd9583257b973cb3336b6d136c9b6
-generated: "2021-05-31T21:04:26.076006+05:30"
@@ -1,21 +0,0 @@
-apiVersion: v2
-name: fission-core
-version: v1.15.0-rc1
-description: Fission is a fast serverless framework for Kubernetes.
-keywords:
- fission
- serverless
-home: https://fission.io/
-maintainers:
-  - name: Vishal Biyani
-    email: vishal@infracloud.io
-  - name: Sanket Sudake
-    email: sanket@infracloud.io
-engine: gotpl
-appVersion: v1.15.0-rc1
-type: application
-dependencies:
-  - name: prometheus
-    version: 13.2.1
-    repository: https://prometheus-community.github.io/helm-charts
-    condition: prometheus.enabled
@@ -1,202 +0,0 @@
-
-                                 Apache License
-                           Version 2.0, January 2004
-                        http://www.apache.org/licenses/
-
-   TERMS AND CONDITIONS FOR USE, REPRODUCTION, AND DISTRIBUTION
-
-   1. Definitions.
-
-      "License" shall mean the terms and conditions for use, reproduction,
-      and distribution as defined by Sections 1 through 9 of this document.
-
-      "Licensor" shall mean the copyright owner or entity authorized by
-      the copyright owner that is granting the License.
-
-      "Legal Entity" shall mean the union of the acting entity and all
-      other entities that control, are controlled by, or are under common
-      control with that entity. For the purposes of this definition,
-      "control" means (i) the power, direct or indirect, to cause the
-      direction or management of such entity, whether by contract or
-      otherwise, or (ii) ownership of fifty percent (50%) or more of the
-      outstanding shares, or (iii) beneficial ownership of such entity.
-
-      "You" (or "Your") shall mean an individual or Legal Entity
-      exercising permissions granted by this License.
-
-      "Source" form shall mean the preferred form for making modifications,
-      including but not limited to software source code, documentation
-      source, and configuration files.
-
-      "Object" form shall mean any form resulting from mechanical
-      transformation or translation of a Source form, including but
-      not limited to compiled object code, generated documentation,
-      and conversions to other media types.
-
-      "Work" shall mean the work of authorship, whether in Source or
-      Object form, made available under the License, as indicated by a
-      copyright notice that is included in or attached to the work
-      (an example is provided in the Appendix below).
-
-      "Derivative Works" shall mean any work, whether in Source or Object
-      form, that is based on (or derived from) the Work and for which the
-      editorial revisions, annotations, elaborations, or other modifications
-      represent, as a whole, an original work of authorship. For the purposes
-      of this License, Derivative Works shall not include works that remain
-      separable from, or merely link (or bind by name) to the interfaces of,
-      the Work and Derivative Works thereof.
-
-      "Contribution" shall mean any work of authorship, including
-      the original version of the Work and any modifications or additions
-      to that Work or Derivative Works thereof, that is intentionally
-      submitted to Licensor for inclusion in the Work by the copyright owner
-      or by an individual or Legal Entity authorized to submit on behalf of
-      the copyright owner. For the purposes of this definition, "submitted"
-      means any form of electronic, verbal, or written communication sent
-      to the Licensor or its representatives, including but not limited to
-      communication on electronic mailing lists, source code control systems,
-      and issue tracking systems that are managed by, or on behalf of, the
-      Licensor for the purpose of discussing and improving the Work, but
-      excluding communication that is conspicuously marked or otherwise
-      designated in writing by the copyright owner as "Not a Contribution."
-
-      "Contributor" shall mean Licensor and any individual or Legal Entity
-      on behalf of whom a Contribution has been received by Licensor and
-      subsequently incorporated within the Work.
-
-   2. Grant of Copyright License. Subject to the terms and conditions of
-      this License, each Contributor hereby grants to You a perpetual,
-      worldwide, non-exclusive, no-charge, royalty-free, irrevocable
-      copyright license to reproduce, prepare Derivative Works of,
-      publicly display, publicly perform, sublicense, and distribute the
-      Work and such Derivative Works in Source or Object form.
-
-   3. Grant of Patent License. Subject to the terms and conditions of
-      this License, each Contributor hereby grants to You a perpetual,
-      worldwide, non-exclusive, no-charge, royalty-free, irrevocable
-      (except as stated in this section) patent license to make, have made,
-      use, offer to sell, sell, import, and otherwise transfer the Work,
-      where such license applies only to those patent claims licensable
-      by such Contributor that are necessarily infringed by their
-      Contribution(s) alone or by combination of their Contribution(s)
-      with the Work to which such Contribution(s) was submitted. If You
-      institute patent litigation against any entity (including a
-      cross-claim or counterclaim in a lawsuit) alleging that the Work
-      or a Contribution incorporated within the Work constitutes direct
-      or contributory patent infringement, then any patent licenses
-      granted to You under this License for that Work shall terminate
-      as of the date such litigation is filed.
-
-   4. Redistribution. You may reproduce and distribute copies of the
-      Work or Derivative Works thereof in any medium, with or without
-      modifications, and in Source or Object form, provided that You
-      meet the following conditions:
-
-      (a) You must give any other recipients of the Work or
-          Derivative Works a copy of this License; and
-
-      (b) You must cause any modified files to carry prominent notices
-          stating that You changed the files; and
-
-      (c) You must retain, in the Source form of any Derivative Works
-          that You distribute, all copyright, patent, trademark, and
-          attribution notices from the Source form of the Work,
-          excluding those notices that do not pertain to any part of
-          the Derivative Works; and
-
-      (d) If the Work includes a "NOTICE" text file as part of its
-          distribution, then any Derivative Works that You distribute must
-          include a readable copy of the attribution notices contained
-          within such NOTICE file, excluding those notices that do not
-          pertain to any part of the Derivative Works, in at least one
-          of the following places: within a NOTICE text file distributed
-          as part of the Derivative Works; within the Source form or
-          documentation, if provided along with the Derivative Works; or,
-          within a display generated by the Derivative Works, if and
-          wherever such third-party notices normally appear. The contents
-          of the NOTICE file are for informational purposes only and
-          do not modify the License. You may add Your own attribution
-          notices within Derivative Works that You distribute, alongside
-          or as an addendum to the NOTICE text from the Work, provided
-          that such additional attribution notices cannot be construed
-          as modifying the License.
-
-      You may add Your own copyright statement to Your modifications and
-      may provide additional or different license terms and conditions
-      for use, reproduction, or distribution of Your modifications, or
-      for any such Derivative Works as a whole, provided Your use,
-      reproduction, and distribution of the Work otherwise complies with
-      the conditions stated in this License.
-
-   5. Submission of Contributions. Unless You explicitly state otherwise,
-      any Contribution intentionally submitted for inclusion in the Work
-      by You to the Licensor shall be under the terms and conditions of
-      this License, without any additional terms or conditions.
-      Notwithstanding the above, nothing herein shall supersede or modify
-      the terms of any separate license agreement you may have executed
-      with Licensor regarding such Contributions.
-
-   6. Trademarks. This License does not grant permission to use the trade
-      names, trademarks, service marks, or product names of the Licensor,
-      except as required for reasonable and customary use in describing the
-      origin of the Work and reproducing the content of the NOTICE file.
-
-   7. Disclaimer of Warranty. Unless required by applicable law or
-      agreed to in writing, Licensor provides the Work (and each
-      Contributor provides its Contributions) on an "AS IS" BASIS,
-      WITHOUT WARRANTIES OR CONDITIONS OF ANY KIND, either express or
-      implied, including, without limitation, any warranties or conditions
-      of TITLE, NON-INFRINGEMENT, MERCHANTABILITY, or FITNESS FOR A
-      PARTICULAR PURPOSE. You are solely responsible for determining the
-      appropriateness of using or redistributing the Work and assume any
-      risks associated with Your exercise of permissions under this License.
-
-   8. Limitation of Liability. In no event and under no legal theory,
-      whether in tort (including negligence), contract, or otherwise,
-      unless required by applicable law (such as deliberate and grossly
-      negligent acts) or agreed to in writing, shall any Contributor be
-      liable to You for damages, including any direct, indirect, special,
-      incidental, or consequential damages of any character arising as a
-      result of this License or out of the use or inability to use the
-      Work (including but not limited to damages for loss of goodwill,
-      work stoppage, computer failure or malfunction, or any and all
-      other commercial damages or losses), even if such Contributor
-      has been advised of the possibility of such damages.
-
-   9. Accepting Warranty or Additional Liability. While redistributing
-      the Work or Derivative Works thereof, You may choose to offer,
-      and charge a fee for, acceptance of support, warranty, indemnity,
-      or other liability obligations and/or rights consistent with this
-      License. However, in accepting such obligations, You may act only
-      on Your own behalf and on Your sole responsibility, not on behalf
-      of any other Contributor, and only if You agree to indemnify,
-      defend, and hold each Contributor harmless for any liability
-      incurred by, or claims asserted against, such Contributor by reason
-      of your accepting any such warranty or additional liability.
-
-   END OF TERMS AND CONDITIONS
-
-   APPENDIX: How to apply the Apache License to your work.
-
-      To apply the Apache License to your work, attach the following
-      boilerplate notice, with the fields enclosed by brackets "[]"
-      replaced with your own identifying information. (Don't include
-      the brackets!)  The text should be enclosed in the appropriate
-      comment syntax for the file format. We also recommend that a
-      file or class name and description of purpose be included on the
-      same "printed page" as the copyright notice for easier
-      identification within third-party archives.
-
-   Copyright [yyyy] [name of copyright owner]
-
-   Licensed under the Apache License, Version 2.0 (the "License");
-   you may not use this file except in compliance with the License.
-   You may obtain a copy of the License at
-
-       http://www.apache.org/licenses/LICENSE-2.0
-
-   Unless required by applicable law or agreed to in writing, software
-   distributed under the License is distributed on an "AS IS" BASIS,
-   WITHOUT WARRANTIES OR CONDITIONS OF ANY KIND, either express or implied.
-   See the License for the specific language governing permissions and
-   limitations under the License.
@@ -1,25 +0,0 @@
-1. Install the client CLI.
-
-Mac:
-  $ curl -Lo fission https://github.com/fission/fission/releases/download/{{ .Chart.Version }}/fission-{{ .Chart.Version }}-darwin-amd64 && chmod +x fission && sudo mv fission /usr/local/bin/
-
-Linux:
-  $ curl -Lo fission https://github.com/fission/fission/releases/download/{{ .Chart.Version }}/fission-{{ .Chart.Version }}-linux-amd64 && chmod +x fission && sudo mv fission /usr/local/bin/
-
-Windows:
-  For Windows, you can use the linux binary on WSL. Or you can download this windows executable: https://github.com/fission/fission/releases/download/{{ .Chart.Version }}/fission-{{ .Chart.Version }}-windows-amd64.exe
-
-2. You're ready to use Fission!
-
-  # Create an environment
-  $ fission env create --name nodejs --image fission/node-env
-
-  # Get a hello world
-  $ curl https://raw.githubusercontent.com/fission/examples/master/nodejs/hello.js > hello.js
-
-  # Register this function with Fission
-  $ fission function create --name hello --env nodejs --code hello.js
-
-  # Run this function
-  $ fission function test --name hello
-  Hello, world!
@@ -1,70 +0,0 @@
-{{/* vim: set filetype=mustache: */}}
-{{/*
-Expand the name of the chart.
-*/}}
-{{- define "name" -}}
-{{- default .Chart.Name .Values.nameOverride | trunc 24 | trimSuffix "-" -}}
-{{- end -}}
-
-{{/*
-Create a default fully qualified app name.
-We truncate at 24 chars because some Kubernetes name fields are limited to this (by the DNS naming spec).
-*/}}
-{{- define "fullname" -}}
-{{- $name := default .Chart.Name .Values.nameOverride -}}
-{{- printf "%s-%s" .Release.Name $name | trunc 24 | trimSuffix "-" -}}
-{{- end -}}
-
-{{/*
-This is a template with config parameters for optional features in fission. This gets mounted on to the controller pod
-as a config map.
-To add new features with config parameters, create a yaml block below with the feature name and define a corresponding struct in
-controller/config.go
-*/}}
-{{- define "config" -}}
-canary:
-  enabled: {{ .Values.canaryDeployment.enabled }}
-  {{- if .Values.prometheus.enabled }}
-  prometheusSvc: "http://{{ .Release.Name }}-prometheus-server.{{ .Release.Namespace }}"
-  {{- else }}
-  prometheusSvc: {{ .Values.prometheus.serviceEndpoint | default "" | quote }}
-  {{- end }}
-  {{- printf "\n" -}}
-{{- end -}}
-
-{{/*
-This template generates the image name for the deployment depending on the value of "repository" field in values.yaml file.
-*/}}
-{{- define "fission-bundleImage" -}}
-{{- if .Values.repository -}}
-    {{ .Values.repository }}/{{ .Values.image }}:{{ .Values.imageTag }}
-{{- else -}}
-    {{ .Values.image }}:{{ .Values.imageTag }}    
-{{- end }}
-{{- end -}}
-
-{{- define "opentelemtry.envs" }}
- name: OTEL_EXPORTER_OTLP_ENDPOINT
-  value: "{{ .Values.openTelemetry.otlpCollectorEndpoint }}"
- name: OTEL_EXPORTER_OTLP_INSECURE
-  value: "{{ .Values.openTelemetry.otlpInsecure }}"
-{{- if .Values.openTelemetry.otlpHeaders }}
- name: OTEL_EXPORTER_OTLP_HEADERS
-  value: "{{ .Values.openTelemetry.otlpHeaders }}"
-{{- end }}
- name: OTEL_TRACES_SAMPLER
-  value: "{{ .Values.openTelemetry.tracesSampler }}"
- name: OTEL_TRACES_SAMPLER_ARG
-  value: "{{ .Values.openTelemetry.tracesSamplingRate }}"
- name: OTEL_PROPAGATORS
-  value: "{{ .Values.openTelemetry.propagators }}"
-{{- end }}
-
-{{- define "opentracing.envs" }}
- name: OPENTRACING_ENABLED
-  value: {{ .Values.openTracing.enabled | default false | quote }}
- name: TRACE_JAEGER_COLLECTOR_ENDPOINT
-  value: "{{ .Values.openTracing.collectorEndpoint }}"
- name: TRACING_SAMPLING_RATE
-  value: {{ .Values.openTracing.samplingRate | default "0.5" | quote }}
-{{- end }}
@@ -1,521 +0,0 @@
---
-apiVersion: v1
-kind: Namespace
-metadata:
-  name: {{ .Values.functionNamespace }}
-  labels:
-    name: fission-function
-    chart: "{{ .Chart.Name }}-{{ .Chart.Version }}"
-    {{- if .Values.enableIstio }}
-    istio-injection: enabled
-    {{- end }}
-
---
-apiVersion: v1
-kind: Namespace
-metadata:
-  name: {{ .Values.builderNamespace }}
-  labels:
-    name: fission-builder
-    chart: "{{ .Chart.Name }}-{{ .Chart.Version }}"
-    {{- if .Values.enableIstio }}
-    istio-injection: enabled
-    {{- end }}
-
---
-apiVersion: rbac.authorization.k8s.io/v1
-kind: ClusterRole
-metadata:
-  name: secret-configmap-getter
-rules:
- apiGroups:
-  - '*'
-  resources:
-  - secrets
-  - configmaps
-  verbs:
-  - get
-  - watch
-  - list
-
---
-apiVersion: rbac.authorization.k8s.io/v1
-kind: ClusterRole
-metadata:
-  name: package-getter
-rules:
- apiGroups:
-  - '*'
-  resources:
-  - packages
-  verbs:
-  - get
-  - watch
-  - list
-
---
-apiVersion: v1
-kind: ServiceAccount
-metadata:
-  name: fission-svc
-  namespace: {{ .Release.Namespace }}
-
---
-kind: RoleBinding
-apiVersion: rbac.authorization.k8s.io/v1
-metadata:
-  name: fission-admin
-  namespace: {{ .Release.Namespace }}
-subjects:
-  - kind: ServiceAccount
-    name: fission-svc
-    namespace: {{ .Release.Namespace }}
-roleRef:
-  kind: ClusterRole
-  name: admin
-  apiGroup: rbac.authorization.k8s.io
-
---
-kind: ClusterRoleBinding
-apiVersion: rbac.authorization.k8s.io/v1
-metadata:
-  name: fission-crd
-subjects:
- kind: ServiceAccount
-  name: fission-svc
-  namespace: {{ .Release.Namespace }}
-roleRef:
-  kind: ClusterRole
-  name: cluster-admin
-  apiGroup: rbac.authorization.k8s.io
-
---
-apiVersion: v1
-kind: ServiceAccount
-metadata:
-  name: fission-fetcher
-  namespace: {{ .Values.functionNamespace }}
-
---
-apiVersion: v1
-kind: ServiceAccount
-metadata:
-  name: fission-builder
-  namespace: {{ .Values.builderNamespace }}
-
---
-apiVersion: v1
-kind: ConfigMap
-metadata:
-  name: feature-config
-  namespace: {{ .Release.Namespace }}
-data:
-  "config.yaml": {{ include "config" . | b64enc }}
-
---
-apiVersion: apps/v1
-kind: Deployment
-metadata:
-  name: controller
-  labels:
-    chart: "{{ .Chart.Name }}-{{ .Chart.Version }}"
-    svc: controller
-    application: fission-api
-spec:
-  replicas: 1
-  selector:
-    matchLabels:
-      svc: controller
-      application: fission-api
-  template:
-    metadata:
-      labels:
-        svc: controller
-        application: fission-api
-    spec:
-      containers:
-      - name: controller
-        image: {{ include "fission-bundleImage" . | quote }}
-        imagePullPolicy: {{ .Values.pullPolicy }}
-        command: ["/fission-bundle"]
-        args: ["--controllerPort", "8888"]
-        env:
-        - name: FISSION_FUNCTION_NAMESPACE
-          value: "{{ .Values.functionNamespace }}"
-        - name: POD_NAMESPACE
-          valueFrom:
-            fieldRef:
-              fieldPath: metadata.namespace
-        {{- include "opentracing.envs" . | indent 8 }}
-        {{- include "opentelemtry.envs" . | indent 8 }}
-        readinessProbe:
-          httpGet:
-            path: "/healthz"
-            port: 8888
-          initialDelaySeconds: 1
-          periodSeconds: 1
-          failureThreshold: 30
-        livenessProbe:
-          httpGet:
-            path: "/healthz"
-            port: 8888
-          initialDelaySeconds: 35
-          periodSeconds: 5
-        volumeMounts:
-        - name: config-volume
-          mountPath: /etc/config/config.yaml
-          subPath: config.yaml
-        ports:
-          - containerPort: 8888
-            name: http
-      serviceAccountName: fission-svc
-      volumes:
-      - name: config-volume
-        configMap:
-          name: feature-config
-{{- if .Values.extraCoreComponentPodConfig }}
-{{ toYaml .Values.extraCoreComponentPodConfig | indent 6 -}}
-{{- end }}
-
-
---
-apiVersion: apps/v1
-kind: Deployment
-metadata:
-  name: executor
-  labels:
-    chart: "{{ .Chart.Name }}-{{ .Chart.Version }}"
-    svc: executor
-spec:
-  replicas: 1
-  selector:
-    matchLabels:
-      svc: executor
-  template:
-    metadata:
-      labels:
-        svc: executor
-      annotations:
-        prometheus.io/scrape: "true"
-        prometheus.io/path: "/metrics"
-        prometheus.io/port: "8080"
-    spec:
-      containers:
-      - name: executor
-        image: {{ include "fission-bundleImage" . | quote }}
-        imagePullPolicy: {{ .Values.pullPolicy }}
-        command: ["/fission-bundle"]
-        args: ["--executorPort", "8888", "--namespace", "{{ .Values.functionNamespace }}"]
-        env:
-        - name: FETCHER_IMAGE
-          value: "{{ .Values.fetcher.image }}:{{ .Values.fetcher.imageTag }}"
-        - name: RUNTIME_IMAGE_PULL_POLICY
-          value: "{{ .Values.pullPolicy }}"
-        - name: FETCHER_IMAGE_PULL_POLICY
-          value: "{{ .Values.pullPolicy }}"
-        - name: ADOPT_EXISTING_RESOURCES
-          value: {{ .Values.executor.adoptExistingResources | default false | quote }}
-        - name: POD_READY_TIMEOUT
-          value: {{ .Values.executor.podReadyTimeout | default false | quote }}
-        - name: ENABLE_ISTIO
-          value: "{{ .Values.enableIstio }}"
-        - name: FETCHER_MINCPU
-          value: {{ .Values.fetcher.resource.cpu.requests | quote }}
-        - name: FETCHER_MINMEM
-          value: {{ .Values.fetcher.resource.mem.requests | quote }}
-        - name: FETCHER_MAXCPU
-          value: {{ .Values.fetcher.resource.cpu.limits | quote }}
-        - name: FETCHER_MAXMEM
-          value: {{ .Values.fetcher.resource.mem.limits | quote }}
-        {{- include "opentracing.envs" . | indent 8 }}
-        {{- include "opentelemtry.envs" . | indent 8 }}
-        readinessProbe:
-          httpGet:
-            path: "/healthz"
-            port: 8888
-          initialDelaySeconds: 1
-          periodSeconds: 1
-          failureThreshold: 30
-        livenessProbe:
-          httpGet:
-            path: "/healthz"
-            port: 8888
-          initialDelaySeconds: 35
-          periodSeconds: 5
-        ports:
-          - containerPort: 8080
-            name: metrics
-          - containerPort: 8888
-            name: http
-      serviceAccountName: fission-svc
-{{- if .Values.extraCoreComponentPodConfig }}
-{{ toYaml .Values.extraCoreComponentPodConfig | indent 6 -}}
-{{- end }}
-
---
-apiVersion: apps/v1
-kind: Deployment
-metadata:
-  name: buildermgr
-  labels:
-    chart: "{{ .Chart.Name }}-{{ .Chart.Version }}"
-    svc: buildermgr
-spec:
-  replicas: 1
-  selector:
-    matchLabels:
-      svc: buildermgr
-  template:
-    metadata:
-      labels:
-        svc: buildermgr
-    spec:
-      containers:
-      - name: buildermgr
-        image: {{ include "fission-bundleImage" . | quote }}
-        imagePullPolicy: {{ .Values.pullPolicy }}
-        command: ["/fission-bundle"]
-        args: ["--builderMgr", "--storageSvcUrl", "http://storagesvc.{{ .Release.Namespace }}", "--envbuilder-namespace", "{{ .Values.builderNamespace }}"]
-        env:
-        - name: FETCHER_IMAGE
-          value: "{{ .Values.fetcher.image }}:{{ .Values.fetcher.imageTag }}"
-        - name: FETCHER_IMAGE_PULL_POLICY
-          value: "{{ .Values.pullPolicy }}"
-        - name: BUILDER_IMAGE_PULL_POLICY
-          value: "{{ .Values.pullPolicy }}"  
-        - name: ENABLE_ISTIO
-          value: "{{ .Values.enableIstio }}"
-        - name: FETCHER_MINCPU
-          value: {{ .Values.fetcher.resource.cpu.requests | quote }}
-        - name: FETCHER_MINMEM
-          value: {{ .Values.fetcher.resource.mem.requests | quote }}
-        - name: FETCHER_MAXCPU
-          value: {{ .Values.fetcher.resource.cpu.limits | quote }}
-        - name: FETCHER_MAXMEM
-          value: {{ .Values.fetcher.resource.mem.limits | quote }}
-        {{- include "opentracing.envs" . | indent 8 }}
-        {{- include "opentelemtry.envs" . | indent 8 }}
-      serviceAccountName: fission-svc
-{{- if .Values.extraCoreComponentPodConfig }}
-{{ toYaml .Values.extraCoreComponentPodConfig | indent 6 -}}
-{{- end }}
-
---
-apiVersion: apps/v1
-kind: Deployment
-metadata:
-  name: kubewatcher
-  labels:
-    chart: "{{ .Chart.Name }}-{{ .Chart.Version }}"
-    svc: kubewatcher
-spec:
-  replicas: 1
-  selector:
-    matchLabels:
-      svc: kubewatcher
-  template:
-    metadata:
-      labels:
-        svc: kubewatcher
-    spec:
-      containers:
-      - name: kubewatcher
-        image: {{ include "fission-bundleImage" . | quote }}
-        imagePullPolicy: {{ .Values.pullPolicy }}
-        command: ["/fission-bundle"]
-        args: ["--kubewatcher", "--routerUrl", "http://router.{{ .Release.Namespace }}"]
-        env:
-        {{- include "opentracing.envs" . | indent 8 }}
-        {{- include "opentelemtry.envs" . | indent 8 }}
-      serviceAccountName: fission-svc
-{{- if .Values.extraCoreComponentPodConfig }}
-{{ toYaml .Values.extraCoreComponentPodConfig | indent 6 -}}
-{{- end }}
-
---
-apiVersion: apps/v1
-kind: Deployment
-metadata:
-  name: timer
-  labels:
-    chart: "{{ .Chart.Name }}-{{ .Chart.Version }}"
-    svc: timer
-spec:
-  replicas: 1
-  selector:
-    matchLabels:
-      svc: timer
-  template:
-    metadata:
-      labels:
-        svc: timer
-    spec:
-      containers:
-      - name: timer
-        image: {{ include "fission-bundleImage" . | quote }}
-        imagePullPolicy: {{ .Values.pullPolicy }}
-        command: ["/fission-bundle"]
-        args: ["--timer", "--routerUrl", "http://router.{{ .Release.Namespace }}"]
-        env:
-        {{- include "opentracing.envs" . | indent 8 }}
-        {{- include "opentelemtry.envs" . | indent 8 }}
-      serviceAccountName: fission-svc
-{{- if .Values.extraCoreComponentPodConfig }}
-{{ toYaml .Values.extraCoreComponentPodConfig | indent 6 -}}
-{{- end }}
-
---
-apiVersion: apps/v1
-kind: Deployment
-metadata:
-  name: storagesvc
-  labels:
-    chart: "{{ .Chart.Name }}-{{ .Chart.Version }}"
-    svc: storagesvc
-    application: fission-storage
-spec:
-  replicas: 1
-  selector:
-    matchLabels:
-      svc: storagesvc
-      application: fission-storage
-  template:
-    metadata:
-      labels:
-        svc: storagesvc
-        application: fission-storage
-    spec:
-      containers:
-      - name: storagesvc
-        image: {{ include "fission-bundleImage" . | quote }}
-        imagePullPolicy: {{ .Values.pullPolicy }}
-        command: ["/fission-bundle"]
-        {{- if and (.Values.persistence.enabled) (eq (.Values.persistence.storageType | default "local") "s3") }}
-        args: ["--storageServicePort", "8000", "--storageType", "s3"]
-        {{- else }}
-        args: ["--storageServicePort", "8000", "--storageType", "local"]
-        {{- end }}
-        env:
-        - name: PRUNE_INTERVAL
-          value: "{{.Values.pruneInterval}}"
-        {{- if and (.Values.persistence.enabled) (eq (.Values.persistence.storageType | default "local") "s3") }}
-        - name: STORAGE_S3_ENDPOINT
-          value: {{ .Values.persistence.s3.endPoint }}
-        - name: STORAGE_S3_BUCKET_NAME
-          value: {{ .Values.persistence.s3.bucketName }}
-        - name: STORAGE_S3_SUB_DIR
-          value: {{ .Values.persistence.s3.subDir }}
-        - name: STORAGE_S3_ACCESS_KEY_ID
-          value: {{ .Values.persistence.s3.accessKeyId }}
-        - name: STORAGE_S3_SECRET_ACCESS_KEY
-          value: {{ .Values.persistence.s3.secretAccessKey }}
-        - name: STORAGE_S3_REGION
-          value: {{ .Values.persistence.s3.region }}
-        {{- end }}
-        {{- include "opentracing.envs" . | indent 8 }}
-        {{- include "opentelemtry.envs" . | indent 8 }}
-        {{- if ne (.Values.persistence.storageType | default "local") "s3" }}
-        volumeMounts:
-        - name: fission-storage
-          mountPath: /fission
-        {{- end }}
-        ports:
-          - containerPort: 8000
-            name: http
-      serviceAccountName: fission-svc
-      {{- if and (.Values.persistence.enabled) (ne (.Values.persistence.storageType | default "local") "s3") }}
-      volumes:
-      - name: fission-storage
-        persistentVolumeClaim:
-          claimName: {{ .Values.persistence.existingClaim | default "fission-storage-pvc" }}
-      {{- else }}
-      volumes:
-      - name: fission-storage
-        emptyDir: {}
-      {{- end }}
-{{- if .Values.extraCoreComponentPodConfig }}
-{{ toYaml .Values.extraCoreComponentPodConfig | indent 6 -}}
-{{- end }}
-
-{{- if .Values.mqt_keda.enabled }}
---
-apiVersion: apps/v1
-kind: Deployment
-metadata:
-  name: mqtrigger-keda
-  labels:
-    chart: "{{ .Chart.Name }}-{{ .Chart.Version }}"
-    svc: mqtrigger-keda
-    messagequeue: keda
-spec:
-  replicas: 1
-  selector:
-    matchLabels:
-      svc: mqtrigger-keda
-      messagequeue: keda
-  template:
-    metadata:
-      labels:
-        svc: mqtrigger-keda
-        messagequeue: keda
-    spec:
-      containers:
-      - name:  mqtrigger-keda
-        image: {{ include "fission-bundleImage" . | quote }}
-        imagePullPolicy: {{ .Values.pullPolicy }}
-        command: ["/fission-bundle"]
-        args: ["--mqt_keda", "--routerUrl", "http://router.{{ .Release.Namespace }}"]
-        env:
-        - name: DEBUG_ENV
-          value: {{ .Values.debugEnv | quote }}
-        - name: CONNECTOR_IMAGE_PULL_POLICY
-          value: "{{ .Values.pullPolicy }}"
-        - name: KAFKA_IMAGE
-          value: "{{ .Values.mqt_keda.connector_images.kafka.image }}:{{ .Values.mqt_keda.connector_images.kafka.tag }}"
-        - name: RABBITMQ_IMAGE
-          value: "{{ .Values.mqt_keda.connector_images.rabbitmq.image }}:{{ .Values.mqt_keda.connector_images.rabbitmq.tag }}"
-        - name: AWS-KINESIS-STREAM_IMAGE
-          value: "{{ .Values.mqt_keda.connector_images.awskinesis.image }}:{{ .Values.mqt_keda.connector_images.awskinesis.tag }}"
-        - name: AWS-SQS-QUEUE_IMAGE
-          value: "{{ .Values.mqt_keda.connector_images.aws_sqs.image }}:{{ .Values.mqt_keda.connector_images.aws_sqs.tag }}"
-        - name: STAN_IMAGE
-          value: "{{ .Values.mqt_keda.connector_images.nats_steaming.image }}:{{ .Values.mqt_keda.connector_images.nats_steaming.tag }}"
-        - name: GCP-PUB-SUB_IMAGE
-          value: "{{ .Values.mqt_keda.connector_images.gcp_pub_sub.image }}:{{ .Values.mqt_keda.connector_images.gcp_pub_sub.tag }}"
-        - name: REDIS_IMAGE
-          value: "{{ .Values.mqt_keda.connector_images.redis.image }}:{{ .Values.mqt_keda.connector_images.redis.tag }}"
-        {{- include "opentracing.envs" . | indent 8 }}
-        {{- include "opentelemtry.envs" . | indent 8 }}
-      serviceAccountName: fission-svc
-{{- if .Values.extraCoreComponentPodConfig }}
-{{ toYaml .Values.extraCoreComponentPodConfig | indent 6 -}}
-{{- end }}
-{{- end }}
-
---
-apiVersion: rbac.authorization.k8s.io/v1
-kind: Role
-metadata:
-  namespace: {{ .Values.functionNamespace }}
-  name: event-fetcher
-rules:
- apiGroups: [""] # "" indicates the core API group
-  resources: ["pods"]
-  verbs: ["get", "watch", "list"]
- apiGroups: [""] # "" indicates the core API group
-  resources: ["events"]
-  verbs: ["*"]
---
-apiVersion: rbac.authorization.k8s.io/v1
-kind: RoleBinding
-metadata:
-  name: fission-fetcher-pod-reader
-  namespace: {{ .Values.functionNamespace }}
-roleRef:
-  apiGroup: rbac.authorization.k8s.io
-  kind: Role
-  name: event-fetcher
-subjects:
- kind: ServiceAccount
-  name: fission-fetcher
-  namespace: {{ .Values.functionNamespace }}
@@ -1,41 +0,0 @@
-{{- if .Values.analyticsNonHelmInstall }}
-apiVersion: batch/v1
-kind: Job
-metadata:
-  name: {{ template "fullname" . }}-{{ .Chart.Version }}-{{ randNumeric 3 }}
-  labels:
-    # The "release" convention makes it easy to tie a release to all of the
-    # Kubernetes resources that were created as part of that release.
-    release: {{ .Release.Name }}
-    # This makes it easy to audit chart usage.
-    chart: {{ .Chart.Name }}-{{ .Chart.Version }}
-    app: {{ template "name" . }}
-spec:
-  #ttlSecondsAfterFinished: 120
-  template:
-    metadata:
-      name: {{ template "fullname" . }}
-      labels:
-        release: {{ .Release.Name }}
-        app: {{ template "name" . }}
-      annotations:
-        {{- if .Values.enableIstio }}
-        "sidecar.istio.io/inject": "false"
-        {{- end }}
-    spec:
-      restartPolicy: Never
-      containers:
-        - name: post-install-job
-        {{- if .Values.imageTag }}
-          image: {{ .Values.postInstallReportImage }}:{{ .Values.imageTag }}
-        {{- else }}
-          image: {{ .Values.postInstallReportImage }}
-        {{- end }}
-          imagePullPolicy: {{ .Values.pullPolicy }}
-          command: [ "/reporter" ]
-          args: ["event", "-c", "fission-use", "-a", "yaml-post-install", "-l", "{{ .Chart.Name }}-{{ .Chart.Version }}"]
-          env:
-            - name: GA_TRACKING_ID
-              value: "{{ .Values.gaTrackingID }}"
-      serviceAccountName: fission-svc
-{{- end }}
@@ -1,33 +0,0 @@
-apiVersion: batch/v1
-kind: Job
-metadata:
-  name: {{ template "fullname" . }}-{{ .Chart.Version }}-{{ randNumeric 3 }}
-  labels:
-    # The "release" convention makes it easy to tie a release to all of the
-    # Kubernetes resources that were created as part of that release.
-    release: "{{ .Release.Name }}"
-    # This makes it easy to audit chart usage.
-    chart: {{ .Chart.Name }}-{{ .Chart.Version }}
-    app: {{ template "name" . }}
-  annotations:
-    # This is what defines this resource as a hook. Without this line, the
-    # job is considered part of the release.
-    "helm.sh/hook": pre-upgrade
-    "helm.sh/hook-delete-policy": hook-succeeded
-spec:
-  backoffLimit: 0
-  template:
-    metadata:
-      name: {{ template "fullname" . }}
-      labels:
-        release: "{{ .Release.Name }}"
-        app: {{ template "name" . }}
-    spec:
-      restartPolicy: Never
-      containers:
-      - name: pre-upgrade-job
-        image: {{ .Values.preUpgradeChecksImage }}:{{ .Values.imageTag }}
-        imagePullPolicy: {{ .Values.pullPolicy }}
-        command: [ "/pre-upgrade-checks" ]
-        args: ["--fn-pod-namespace", "{{ .Values.functionNamespace }}", "--envbuilder-namespace", "{{ .Values.builderNamespace }}"]
-      serviceAccountName: fission-svc
@@ -1,23 +0,0 @@
-{{- if and (.Values.persistence.enabled) (not .Values.persistence.existingClaim) (eq (.Values.persistence.storageType | default "local") "local") }}
-kind: PersistentVolumeClaim
-apiVersion: v1
-metadata:
-  name: fission-storage-pvc
-  labels:
-    app: fission-storage
-    chart: "{{ .Chart.Name }}-{{ .Chart.Version }}"
-    release: "{{ .Release.Name }}"
-spec:
-  accessModes:
-    - {{ .Values.persistence.accessMode | quote }}
-  resources:
-    requests:
-      storage: {{ .Values.persistence.size | quote }}
-  {{- if .Values.persistence.storageClass }}
-  {{- if (eq "-" .Values.persistence.storageClass) }}
-  storageClassName: ""
-  {{- else }}
-  storageClassName: {{ .Values.persistence.storageClass | quote }}
-  {{- end }}
-  {{- end }}
-{{- end }}
@@ -1,93 +0,0 @@
-apiVersion: apps/v1
-{{- if not .Values.router.deployAsDaemonSet }}
-kind: Deployment
-{{- else }}
-kind: DaemonSet
-{{- end }}
-metadata:
-  name: router
-  labels:
-    chart: "{{ .Chart.Name }}-{{ .Chart.Version }}"
-    svc: router
-    application: fission-router
-spec:
-{{- if not .Values.router.deployAsDaemonSet }}
-  replicas: 1
-{{- end }}
-  selector:
-    matchLabels:
-      application: fission-router
-      svc: router
-  template:
-    metadata:
-      labels:
-        application: fission-router
-        svc: router
-      annotations:
-        prometheus.io/scrape: "true"
-        prometheus.io/path: "/metrics"
-        prometheus.io/port: "8080"
-    spec:
-      containers:
-      - name: router
-        image: {{ include "fission-bundleImage" . | quote }}
-        imagePullPolicy: {{ .Values.pullPolicy }}
-        command: ["/fission-bundle"]
-        args: ["--routerPort", "8888", "--executorUrl", "http://executor.{{ .Release.Namespace }}"]
-        env:
-        - name: POD_NAMESPACE
-          valueFrom:
-            fieldRef:
-              fieldPath: metadata.namespace
-        - name: ROUTER_ROUND_TRIP_TIMEOUT
-          value: {{ .Values.router.roundTrip.timeout | default "50ms" | quote }}
-        - name: ROUTER_ROUNDTRIP_TIMEOUT_EXPONENT
-          value: {{ .Values.router.roundTrip.timeoutExponent | default 2 | quote }}
-        - name: ROUTER_ROUND_TRIP_KEEP_ALIVE_TIME
-          value: {{ .Values.router.roundTrip.keepAliveTime | default "30s" | quote }}
-        - name: ROUTER_ROUND_TRIP_DISABLE_KEEP_ALIVE
-          value: {{ .Values.router.roundTrip.disableKeepAlive | default true | quote }}
-        - name: ROUTER_ROUND_TRIP_MAX_RETRIES
-          value: {{ .Values.router.roundTrip.maxRetries | default 10 | quote }}
-        - name: ROUTER_SVC_ADDRESS_MAX_RETRIES
-          value: {{ .Values.router.svcAddressMaxRetries | default 5 | quote }}
-        - name: ROUTER_SVC_ADDRESS_UPDATE_TIMEOUT
-          value: {{ .Values.router.svcAddressUpdateTimeout | default "30s" | quote }}
-        - name: ROUTER_UNTAP_SERVICE_TIMEOUT
-          value: {{ .Values.router.unTapServiceTimeout | default "3600s" | quote }}
-        - name: USE_ENCODED_PATH
-          value: {{ .Values.router.useEncodedPath | default false | quote }}
-        - name: DEBUG_ENV
-          value: {{ .Values.debugEnv | quote }}
-        - name: DISPLAY_ACCESS_LOG
-          value: {{ .Values.router.displayAccessLog | default false | quote }}
-        {{- include "opentracing.envs" . | indent 8 }}
-        {{- include "opentelemtry.envs" . | indent 8 }}
-        resources:
-          {{- toYaml .Values.router.resources | indent 10 }}
-        readinessProbe:
-          httpGet:
-            path: "/router-healthz"
-            port: 8888
-          initialDelaySeconds: 1
-          periodSeconds: 1
-          failureThreshold: 30
-        livenessProbe:
-          httpGet:
-            path: "/router-healthz"
-            port: 8888
-          initialDelaySeconds: 35
-          periodSeconds: 5
-        ports:
-        - containerPort: 8080
-          name: metrics
-        - containerPort: 8888
-          name: http
-      serviceAccountName: fission-svc
-{{- if .Values.router.extraCoreComponentPodConfig }}
-{{ toYaml .Values.router.extraCoreComponentPodConfig | indent 6 -}}
-{{- else }}
-{{- if .Values.extraCoreComponentPodConfig }}
-{{ toYaml .Values.extraCoreComponentPodConfig | indent 6 -}}
-{{- end }}
-{{- end }}
@@ -1,75 +0,0 @@
-apiVersion: v1
-kind: Service
-metadata:
-  name: router
-  labels:
-    svc: router
-    application: fission-router
-    chart: "{{ .Chart.Name }}-{{ .Chart.Version }}"
-{{- if .Values.router.svcAnnotations }}
-  annotations:
-{{ toYaml .Values.router.svcAnnotations | indent 4 }}
-{{- end }}
-spec:
-  type: {{ .Values.routerServiceType }}
-  ports:
-  - port: 80
-    targetPort: 8888
-{{- if eq .Values.routerServiceType "NodePort" }}
-    nodePort: {{ .Values.routerPort }}
-{{- end }}
-  selector:
-    svc: router
-
---
-apiVersion: v1
-kind: Service
-metadata:
-  name: controller
-  labels:
-    svc: controller
-    application: fission-api
-    chart: "{{ .Chart.Name }}-{{ .Chart.Version }}"
-spec:
-  type: {{ .Values.serviceType }}
-  ports:
-  - port: 80
-    targetPort: 8888
-{{- if eq .Values.serviceType "NodePort" }}
-    nodePort: {{ .Values.controllerPort }}
-{{- end }}
-  selector:
-    svc: controller
-
---
-apiVersion: v1
-kind: Service
-metadata:
-  name: storagesvc
-  labels:
-    svc: storagesvc
-    application: fission-storage
-    chart: "{{ .Chart.Name }}-{{ .Chart.Version }}"
-spec:
-  type: ClusterIP
-  ports:
-  - port: 80
-    targetPort: 8000
-  selector:
-    svc: storagesvc
-
---
-apiVersion: v1
-kind: Service
-metadata:
-  name: executor
-  labels:
-    svc: executor
-    chart: "{{ .Chart.Name }}-{{ .Chart.Version }}"
-spec:
-  type: ClusterIP
-  ports:
-    - port: 80
-      targetPort: 8888
-  selector:
-    svc: executor
@@ -1,305 +0,0 @@
-#
-# Fission chart configuration
-#
-
-## Kubernetes configuration
-## For minikube, set this to NodePort, elsewhere use LoadBalancer or ClusterIP.
-serviceType: ClusterIP
-
-## For minikube, set this to NodePort, elsewhere use LoadBalancer or ClusterIP.
-routerServiceType: LoadBalancer
-
-## Image base repository
-## Leave it empty for using existing local image
-repository: index.docker.io
-
-## Fission image repository
-image: fission/fission-bundle
-
-## Fission image version
-imageTag: v1.15.0-rc1
-
-## Image pull policy
-pullPolicy: IfNotPresent
-
-## Port at which Fission controller service should be exposed
-controllerPort: 31313
-
-## Port at which Fission router service should be exposed
-routerPort: 31314
-
-## Namespace in which to run fission functions (this is different from
-## the release namespace)
-functionNamespace: fission-function
-
-## Namespace in which to run fission builders (this is different from
-## the release namespace)
-builderNamespace: fission-builder
-
-## Enable istio integration
-enableIstio: false
-
-fetcher:
-  ## Fetcher repository
-  image: fission/fetcher
-  ## Fetcher image version
-  imageTag: v1.15.0-rc1
-
-  ## Fetcher is only for to downloading or uploading archive.
-  ## Normally, you don't need to change the value here, unless necessary.
-  resource:
-    cpu:
-      requests: "10m"
-      ## Low CPU limits will increases the function specialization time.
-      limits: ""
-    mem:
-      requests: "16Mi"
-      limits: ""
-
-executor:
-  adoptExistingResources: false
-  podReadyTimeout: 300s
-
-## Router config
-router:
-  deployAsDaemonSet: false
-  svcAddressMaxRetries: 5
-  svcAddressUpdateTimeout: 30s
-  unTapServiceTimeout: 3600s
-  ## Display endpoint access logs
-  ## To be aware of enabling logging endpoint access log, it increases
-  ## router resource utilization when under heavy workloads.
-  displayAccessLog: false
-
-  ## Add annotations for router
-  # svcAnnotations:
-  #   cloud.google.com/load-balancer-type: Internal
-
-  ## For router to match encoded path.
-  ## If true, "/foo%2Fbar" will match the path "/{var}";
-  ## Otherwise, it will match the path "/foo/bar".
-  useEncodedPath: false
-
-  roundTrip:
-    ## If true, router will disable the HTTP keep-alive which result in performance degradation.
-    ## But it ensures that router can redirect new coming requests to new function pods.
-    ##
-    ## If false, router will enable transport keep-alive feature for better performance.
-    ## However, the drawback is it takes longer to switch to newly created function pods
-    ## if using newdeploy as executor type for function. If you want to preserve the
-    ## performance while keeping the short switching time to new function, you can create
-    ## an environment with short grace period by setting flag "--graceperiod" (default 360s),
-    ## so that kubernetes will be able to reap old function pod quickly.
-    ##
-    ## For details, see https://github.com/fission/fission/issues/723
-    disableKeepAlive: true
-
-    ## The keep-alive period for an active network connection to function pod.
-    keepAliveTime: 30s
-
-    ## HTTP transport request timeout
-    timeout: 50ms
-
-    ## The length of request timeout will multiply with timeoutExponent after each retry
-    timeoutExponent: 2
-
-    ## Max retries times of a failed request
-    maxRetries: 10
-
-  ## Sample with a rate per time window (traces/second)
-  traceSamplingRate: 0.5
-
-  ## Extend the container specs for the router fission pods.
-  ## Can be used to add things like affinty/tolerations/nodeSelectors/etc.
-  ## For example:
-  ## extraCoreComponentPodConfig:
-  ##   affinity:
-  ##     nodeAffinity:
-  ##       requiredDuringSchedulingIgnoredDuringExecution:
-  ##         nodeSelectorTerms:
-  ##           - matchExpressions:
-  ##             - key: capability
-  ##               operator: In
-  ##               values:
-  ##                 - app
-  #extraCoreComponentPodConfig:
-  #  affinity:
-  #  tolerations:
-  #  nodeSelector:
-
-  # Pod resources as:
-  #  resources:
-  #    limits:
-  #      cpu: <tbd>
-  #      memory: <tbd>
-  #    requests:
-  #      cpu: <tbd>
-  #      memory: <tbd>
-  resources: {}
-
-## Persist data to a persistent volume.
-persistence:
-  ## If true, fission will create/use a Persistent Volume Claim unless storageType is set to s3
-  ## If false, use emptyDir
-  ##
-  enabled: true
-
-  ## Must be set to either local or S3.
-  ## If storateType is set(other than local), one of its backend configuration must be set as below.
-  #storageType: local | s3
-
-  ## Sample configruation for AWS s3 storage backend
-  #s3:
-  # bucketName: <awsBucketName>
-  # subDir: <sub directory within a bucket>
-  # accessKeyId: <awsAccessKeyId>
-  # secretAccessKey: <awsSecretAccessKey>
-  # region: <awsRegion>
-
-  ## A manually managed Persistent Volume Claim name
-  ## Requires persistence.enabled: true
-  ## If defined, PVC must be created manually before volume will be bound
-  ##
-  # existingClaim:
-
-  ## If defined, storageClassName: <storageClass>
-  ## If set to "-", storageClassName: "", which disables dynamic provisioning
-  ## If undefined (the default) or set to null, no storageClassName spec is
-  ##   set, choosing the default provisioner. (gp2 on AWS, standard on
-  ##   GKE, AWS & OpenStack)
-  ##
-  # storageClass: "-"
-
-  accessMode: ReadWriteOnce
-  size: 8Gi
-
-## Extend the container specs for the core fission pods.
-## Can be used to add things like affinty/tolerations/nodeSelectors/etc.
-## For example:
-## extraCoreComponentPodConfig:
-##   affinity:
-##     nodeAffinity:
-##       requiredDuringSchedulingIgnoredDuringExecution:
-##         nodeSelectorTerms:
-##           - matchExpressions:
-##             - key: capability
-##               operator: In
-##               values:
-##                 - app
-#extraCoreComponentPodConfig:
-#  affinity:
-#  tolerations:
-#  nodeSelector:
-
-## Analytics let us count how many people installed fission. Set to
-## false to disable analytics.
-analytics: true
-
-## Internally used for generating an analytics job for non-helm installs
-analyticsNonHelmInstall: false
-
-## Google Analytics Tracking ID
-gaTrackingID: UA-196546703-1
-
-## Archive pruner is a garbage collector for archives on the fission storage service.
-## This interval configures the frequency at which it runs inside the storagesvc pod.
-## The value is in minutes.
-pruneInterval: 60
-
-## Fission pre-install/pre-upgrade checks live in this image
-preUpgradeChecksImage: fission/pre-upgrade-checks
-
-## Fission ppost-install/post-upgrade reporting live in this image
-postInstallReportImage: fission/reporter
-
-## if there are any pod specialization errors when a function is triggered and this flag is set to true, the error
-## summary is returned as part of http response
-debugEnv: false
-
-## Prometheus for scrapping service metrics
-prometheus:
-  ## set this flag to true if prometheus needs to be deployed along with fission
-  enabled: false
-
-  ## If enabled is false, please assign the prometheus service URL
-  ## that is accessible by components.
-  serviceEndpoint: ""
-
-## set this flag to false if you dont need canary deployment feature
-canaryDeployment:
-  enabled: false
-
-# Use the following flags to enable OpenTracing.
-# Note: OpenTracing support will be removed in an upcoming release.
-# Please prefer using OpenTelemetry instead.
-openTracing:
-  ## set this flag to true if you wish to enable OpenTracing
-  enabled: false
-
-  ## if enabled is true, the variable is endpoint of Jaeger collector in the format shown below
-  #collectorEndpoint: "http://jaeger-collector.jaeger.svc:14268/api/traces?format=jaeger.thrift"
-
-  ## uniformly sample traces with the given probabilistic sampling rate
-  #samplingRate: 0.75
-
-# It is an alternate to OpenTracing.
-openTelemetry:
-  # Use this flag to set the collector endpoint for OpenTelemetry.
-  # The variable is endpoint of the collector in the format shown below.
-  # otlpCollectorEndpoint: "otel-collector.observability.svc:4317"
-  otlpCollectorEndpoint: ""
-  # Set this flag to false if you are using secure endpoint for the collector.
-  otlpInsecure: true
-  # Key-value pairs to be used as headers associated with gRPC or HTTP requests
-  # to the collector.
-  # Eg. otlpHeaders: "key1=value1,key2=value2"
-  otlpHeaders: ""
-  # Supported samplers:
-  # always_on - Sampler that always samples spans, regardless of the parent span's sampling decision.
-  # always_off - Sampler that never samples spans, regardless of the parent span's sampling decision.
-  # traceidratio - Sampler that samples probabalistically based on rate.
-  # parentbased_always_on - (default if empty) Sampler that respects its parent span's sampling decision, but otherwise always samples.
-  # parentbased_always_off - Sampler that respects its parent span's sampling decision, but otherwise never samples.
-  # parentbased_traceidratio - Sampler that respects its parent span's sampling decision, but otherwise samples probabalistically based on rate.
-  tracesSampler: "parentbased_traceidratio"
-  # Each Sampler type defines its own expected input, if any.
-  # Currently we get trace ratio for the case of,
-  # 1. traceidratio
-  # 2. parentbased_traceidratio
-  # Sampling probability, a number in the [0..1] range, e.g. "0.1". Default is 0.1.
-  tracesSamplingRate: "0.1"
-  # Supported providers:
-  # tracecontext - W3C Trace Context
-  # baggage - W3C Baggage
-  # b3 - B3 Single
-  # b3multi - B3 Multi
-  # jaeger - Jaeger uber-trace-id header
-  # xray - AWS X-Ray (third party)
-  # ottrace - OpenTracing Trace (third party)
-  propagators: "tracecontext,baggage"
-
-## Message Queue Trigger Kind, KEDA: enable and configuration
-mqt_keda:
-  enabled: true
-  connector_images:
-    kafka:
-      image: fission/keda-kafka-http-connector
-      tag: v0.8
-    rabbitmq:
-      image: fission/keda-rabbitmq-http-connector
-      tag: v0.8
-    awskinesis:
-      image: fission/keda-aws-kinesis-http-connector
-      tag: v0.8
-    aws_sqs:
-      image: fission/keda-aws-sqs-http-connector
-      tag: v0.8
-    nats_steaming:
-      image: fission/keda-nats-streaming-http-connector
-      tag: v0.9
-    gcp_pub_sub:
-      image: fission/keda-gcp-pubsub-http-connector
-      tag: v0.3
-    redis:
-      image: fission/keda-redis-http-connector
-      tag: v0.1
@@ -1,4 +1,4 @@
-FROM alpine:3.14
+FROM alpine:3.14.3
 RUN apk add --update ca-certificates
 COPY builder /builder
 ENTRYPOINT ["/builder"]
@@ -1,4 +1,4 @@
-FROM alpine:3.14
+FROM alpine:3.14.3
 RUN apk add --update ca-certificates
 COPY fetcher /
 ENTRYPOINT ["/fetcher"]
@@ -39,7 +39,7 @@ var (
 	readyToServe uint32
 )

-func Run(logger *zap.Logger) {
+func Run(ctx context.Context, logger *zap.Logger) {
 	flag.Usage = fetcherUsage
 	collectorEndpoint := flag.String("jaeger-collector-endpoint", "", "")
 	specializeOnStart := flag.Bool("specialize-on-startup", false, "Flag to activate specialize process at pod starup")
@@ -62,8 +62,6 @@ func Run(logger *zap.Logger) {
 			}
 		}
 	}
-
-	ctx := context.Background()
 	openTracingEnabled := tracing.TracingEnabled(logger)
 	if openTracingEnabled {
 		go func() {
@@ -20,6 +20,7 @@ import (
 	"github.com/fission/fission/cmd/fetcher/app"
 	"github.com/fission/fission/pkg/utils/loggerfactory"
 	"github.com/fission/fission/pkg/utils/profile"
+	"github.com/fission/fission/pkg/utils/signals"
 )

 // Usage: fetcher <shared volume path>
@@ -29,5 +30,6 @@ func main() {

 	profile.ProfileIfEnabled(logger)

-	app.Run(logger)
+	ctx := signals.SetupSignalHandlerWithContext(logger)
+	app.Run(ctx, logger)
 }
@@ -1,4 +1,4 @@
-FROM alpine:3.14
+FROM alpine:3.14.3
 RUN apk add --update ca-certificates
 COPY fission-bundle /
 ENTRYPOINT ["/fission-bundle"]
@@ -20,7 +20,6 @@ import (
 	"context"
 	"flag"
 	"fmt"
-	"log"
 	"os"
 	"strconv"

@@ -42,72 +41,49 @@ import (
 	"github.com/fission/fission/pkg/utils/loggerfactory"
 	"github.com/fission/fission/pkg/utils/otel"
 	"github.com/fission/fission/pkg/utils/profile"
+	"github.com/fission/fission/pkg/utils/signals"
 	"github.com/fission/fission/pkg/utils/tracing"
 )

-func runController(logger *zap.Logger, port int, openTracingEnabled bool) {
-	controller.Start(logger, port, false, openTracingEnabled)
-	logger.Fatal("controller exited")
+func runController(ctx context.Context, logger *zap.Logger, port int, openTracingEnabled bool) {
+	controller.Start(ctx, logger, port, false, openTracingEnabled)
 }

-func runRouter(logger *zap.Logger, port int, executorUrl string, openTracingEnabled bool) {
-	router.Start(logger, port, executorUrl, openTracingEnabled)
-	logger.Fatal("router exited")
+func runRouter(ctx context.Context, logger *zap.Logger, port int, executorUrl string, openTracingEnabled bool) {
+	router.Start(ctx, logger, port, executorUrl, openTracingEnabled)
 }

-func runExecutor(logger *zap.Logger, port int, functionNamespace, envBuilderNamespace string, openTracingEnabled bool) {
-	err := executor.StartExecutor(logger, functionNamespace, envBuilderNamespace, port, openTracingEnabled)
-	if err != nil {
-		logger.Fatal("error starting executor", zap.Error(err))
-	}
+func runExecutor(ctx context.Context, logger *zap.Logger, port int, functionNamespace, envBuilderNamespace string, openTracingEnabled bool) error {
+	return executor.StartExecutor(ctx, logger, functionNamespace, envBuilderNamespace, port, openTracingEnabled)
 }

-func runKubeWatcher(logger *zap.Logger, routerUrl string) {
-	err := kubewatcher.Start(logger, routerUrl)
-	if err != nil {
-		logger.Fatal("error starting kubewatcher", zap.Error(err))
-	}
+func runKubeWatcher(ctx context.Context, logger *zap.Logger, routerUrl string) error {
+	return kubewatcher.Start(ctx, logger, routerUrl)
 }

-func runTimer(logger *zap.Logger, routerUrl string) {
-	err := timer.Start(logger, routerUrl)
-	if err != nil {
-		logger.Fatal("error starting timer", zap.Error(err))
-	}
+func runTimer(ctx context.Context, logger *zap.Logger, routerUrl string) error {
+	return timer.Start(ctx, logger, routerUrl)
 }

-func runMessageQueueMgr(logger *zap.Logger, routerUrl string) {
-	err := mqtrigger.Start(logger, routerUrl)
-	if err != nil {
-		logger.Fatal("error starting message queue manager", zap.Error(err))
-	}
+func runMessageQueueMgr(logger *zap.Logger, routerUrl string) error {
+	return mqtrigger.Start(logger, routerUrl)
 }

 // KEDA based MessageQueue Trigger Manager
-func runMQManager(logger *zap.Logger, routerURL string) {
-	err := mqt.StartScalerManager(logger, routerURL)
-	if err != nil {
-		logger.Fatal("error starting mqt scaler manager", zap.Error(err))
-	}
+func runMQManager(ctx context.Context, logger *zap.Logger, routerURL string) error {
+	return mqt.StartScalerManager(ctx, logger, routerURL)
 }

-func runStorageSvc(logger *zap.Logger, port int, storage storagesvc.Storage, openTracingEnabled bool) {
-	err := storagesvc.Start(logger, storage, port, openTracingEnabled)
-	if err != nil {
-		logger.Fatal("error starting storage service", zap.Error(err))
-	}
+func runStorageSvc(ctx context.Context, logger *zap.Logger, port int, storage storagesvc.Storage, openTracingEnabled bool) error {
+	return storagesvc.Start(ctx, logger, storage, port, openTracingEnabled)
 }

-func runBuilderMgr(logger *zap.Logger, storageSvcUrl string, envBuilderNamespace string) {
-	err := buildermgr.Start(logger, storageSvcUrl, envBuilderNamespace)
-	if err != nil {
-		logger.Fatal("error starting builder manager", zap.Error(err))
-	}
+func runBuilderMgr(ctx context.Context, logger *zap.Logger, storageSvcUrl string, envBuilderNamespace string) error {
+	return buildermgr.Start(ctx, logger, storageSvcUrl, envBuilderNamespace)
 }

-func runLogger() {
-	functionLogger.Start()
-	log.Fatalf("Error: Logger exited.")
+func runLogger(ctx context.Context, logger *zap.Logger) {
+	functionLogger.Start(ctx, logger)
 }

 func getPort(logger *zap.Logger, portArg interface{}) int {
@@ -153,6 +129,12 @@ func getServiceName(arguments map[string]interface{}) string {
 	return serviceName
 }

+func exitWithSync(logger *zap.Logger) {
+	// Ignore error, safe to ignore as per https://github.com/uber-go/zap/issues/328
+	_ = logger.Sync()
+	os.Exit(1)
+}
+
 func main() {
 	var err error

@@ -216,27 +198,31 @@ Options:
  --version                       Print version information
 `
 	logger := loggerfactory.GetLogger()
-	defer logger.Sync()
+	defer exitWithSync(logger)

 	profile.ProfileIfEnabled(logger)

 	version := fmt.Sprintf("Fission Bundle Version: %v", info.BuildInfo().String())
 	arguments, err := docopt.ParseArgs(usage, nil, version)
 	if err != nil {
-		logger.Fatal("Could not parse command line arguments", zap.Error(err))
+		logger.Error("failed to parse arguments", zap.Error(err))
+		return
 	}

-	ctx := context.Background()
+	ctx := signals.SetupSignalHandlerWithContext(logger)
+
 	openTracingEnabled := tracing.TracingEnabled(logger)
 	if openTracingEnabled {
 		err = tracing.RegisterTraceExporter(logger, os.Getenv("TRACE_JAEGER_COLLECTOR_ENDPOINT"), getServiceName(arguments))
 		if err != nil {
-			logger.Fatal("Could not register trace exporter", zap.Error(err), zap.Any("argument", arguments))
+			logger.Error("failed to register trace exporter", zap.Error(err), zap.Any("argument", arguments))
+			return
 		}
 	} else {
 		shutdown, err := otel.InitProvider(ctx, logger, getServiceName(arguments))
 		if err != nil {
-			logger.Fatal("error initializing provider for OTLP", zap.Error(err), zap.Any("argument", arguments))
+			logger.Error("error initializing provider for OTLP", zap.Error(err), zap.Any("argument", arguments))
+			return
 		}
 		if shutdown != nil {
 			defer shutdown(ctx)
@@ -252,41 +238,71 @@ Options:

 	if arguments["--controllerPort"] != nil {
 		port := getPort(logger, arguments["--controllerPort"])
-		runController(logger, port, openTracingEnabled)
+		runController(ctx, logger, port, openTracingEnabled)
+		logger.Error("controller exited")
+		return
 	}

 	if arguments["--routerPort"] != nil {
 		port := getPort(logger, arguments["--routerPort"])
-		runRouter(logger, port, executorUrl, openTracingEnabled)
+		runRouter(ctx, logger, port, executorUrl, openTracingEnabled)
+		logger.Error("router exited")
+		return
 	}

 	if arguments["--executorPort"] != nil {
 		port := getPort(logger, arguments["--executorPort"])
-		runExecutor(logger, port, functionNs, envBuilderNs, openTracingEnabled)
+		err = runExecutor(ctx, logger, port, functionNs, envBuilderNs, openTracingEnabled)
+		if err != nil {
+			logger.Error("executor exited", zap.Error(err))
+			return
+		}
 	}

 	if arguments["--kubewatcher"] == true {
-		runKubeWatcher(logger, routerUrl)
+		err = runKubeWatcher(ctx, logger, routerUrl)
+		if err != nil {
+			logger.Error("kubewatcher exited", zap.Error(err))
+			return
+		}
 	}

 	if arguments["--timer"] == true {
-		runTimer(logger, routerUrl)
+		err = runTimer(ctx, logger, routerUrl)
+		if err != nil {
+			logger.Error("timer exited", zap.Error(err))
+			return
+		}
 	}

 	if arguments["--mqt"] == true {
-		runMessageQueueMgr(logger, routerUrl)
+		err = runMessageQueueMgr(logger, routerUrl)
+		if err != nil {
+			logger.Error("message queue manager exited", zap.Error(err))
+			return
+		}
 	}

 	if arguments["--mqt_keda"] == true {
-		runMQManager(logger, routerUrl)
+		err = runMQManager(ctx, logger, routerUrl)
+		if err != nil {
+			logger.Error("mqt scaler manager exited", zap.Error(err))
+			return
+		}
 	}

 	if arguments["--builderMgr"] == true {
-		runBuilderMgr(logger, storageSvcUrl, envBuilderNs)
+		err = runBuilderMgr(ctx, logger, storageSvcUrl, envBuilderNs)
+		if err != nil {
+			logger.Error("builder manager exited", zap.Error(err))
+			return
+		}
 	}

 	if arguments["--logger"] == true {
-		runLogger()
+		runLogger(ctx, logger)
+		logger.Error("logger exited")
+		return
 	}

 	if arguments["--storageServicePort"] != nil {
@@ -299,8 +315,13 @@ Options:
 		} else if arguments["--storageType"] == string(storagesvc.StorageTypeLocal) {
 			storage = storagesvc.NewLocalStorage("/fission")
 		}
-		runStorageSvc(logger, port, storage, openTracingEnabled)
+		err := runStorageSvc(ctx, logger, port, storage, openTracingEnabled)
+		if err != nil {
+			logger.Error("storage service exited", zap.Error(err))
+			return
+		}
 	}

-	select {}
+	<-ctx.Done()
+	logger.Error("exiting")
 }
@@ -18,7 +18,6 @@ package mqtrigger

 import (
 	"fmt"
-	"io/ioutil"
 	"os"
 	"path"
 	"strings"
@@ -87,7 +86,7 @@ func readSecrets(logger *zap.Logger, secretsPath string) (map[string][]byte, err
 		return nil, err
 	}

-	secretFiles, err := ioutil.ReadDir(secretsPath)
+	secretFiles, err := os.ReadDir(secretsPath)
 	if err != nil {
 		return nil, err
 	}
@@ -102,7 +101,7 @@ func readSecrets(logger *zap.Logger, secretsPath string) (map[string][]byte, err
 			logger.Info(fmt.Sprintf("Reading secret from %s", fileName))

 			filePath := path.Join(secretsPath, fileName)
-			secret, fileReadErr := ioutil.ReadFile(filePath)
+			secret, fileReadErr := os.ReadFile(filePath)
 			if fileReadErr != nil {
 				return nil, fileReadErr
 			}
@@ -32,8 +32,8 @@ import (
 const (
 	usage = `Fission: Fast and Simple Serverless Functions for Kubernetes

- * Github: https://github.com/fission/fission 
- * Documentation: https://docs.fission.io/docs
+ * GitHub: https://github.com/fission/fission
+ * Documentation: https://fission.io/docs
 `
 )

@@ -1,4 +1,4 @@
-FROM alpine:3.14
+FROM alpine:3.14.3
 RUN apk add --update ca-certificates
 COPY pre-upgrade-checks /
 ENTRYPOINT ["/pre-upgrade-checks"]
@@ -69,9 +69,9 @@ func makePreUpgradeTaskClient(logger *zap.Logger, fnPodNs, envBuilderNs string)

 // GetFunctionCRD checks if function CRD is present on the cluster and returns it. It returns nil if not found
 // We can use this to find out if fission had been previously installed on this cluster too.
-func (client *PreUpgradeTaskClient) GetFunctionCRD() *v1.CustomResourceDefinition {
+func (client *PreUpgradeTaskClient) GetFunctionCRD(ctx context.Context) *v1.CustomResourceDefinition {
 	for i := 0; i < maxRetries; i++ {
-		crd, err := client.apiExtClient.ApiextensionsV1().CustomResourceDefinitions().Get(context.TODO(), FunctionCRD, metav1.GetOptions{})
+		crd, err := client.apiExtClient.ApiextensionsV1().CustomResourceDefinitions().Get(ctx, FunctionCRD, metav1.GetOptions{})
 		if err != nil && k8serrors.IsNotFound(err) {
 			continue
 		}
@@ -81,8 +81,8 @@ func (client *PreUpgradeTaskClient) GetFunctionCRD() *v1.CustomResourceDefinitio
 }

 // GetMqtCRD checks if MQT CRD is present on the cluster and returns it. It returns nil if not found
-func (client *PreUpgradeTaskClient) GetMqtCRD() *v1.CustomResourceDefinition {
-	crd, err := client.apiExtClient.ApiextensionsV1().CustomResourceDefinitions().Get(context.TODO(), MqtCRD, metav1.GetOptions{})
+func (client *PreUpgradeTaskClient) GetMqtCRD(ctx context.Context) *v1.CustomResourceDefinition {
+	crd, err := client.apiExtClient.ApiextensionsV1().CustomResourceDefinitions().Get(ctx, MqtCRD, metav1.GetOptions{})
 	if err != nil {
 		client.logger.Error("Could not find MQT CRD", zap.Error(err))
 		return nil
@@ -92,9 +92,9 @@ func (client *PreUpgradeTaskClient) GetMqtCRD() *v1.CustomResourceDefinition {

 // LatestSchemaApplied ensures that the end user has applied the latest CRDs generated to the cluster.
 // For future reference: whenever a new field is added, we need to check for that field's existence in this function
-func (client *PreUpgradeTaskClient) LatestSchemaApplied() error {
+func (client *PreUpgradeTaskClient) LatestSchemaApplied(ctx context.Context) error {
 	client.logger.Info("Checking if user has applied the latest CRDs")
-	funcCRD := client.GetFunctionCRD()
+	funcCRD := client.GetFunctionCRD(ctx)
 	if funcCRD == nil {
 		return errors.New("Could not get the Function CRD")
 	}
@@ -103,7 +103,7 @@ func (client *PreUpgradeTaskClient) LatestSchemaApplied() error {
 		return errors.New("Apply the newer CRDs before upgrading")
 	}

-	mqtCRD := client.GetMqtCRD()
+	mqtCRD := client.GetMqtCRD(ctx)
 	if mqtCRD == nil {
 		return errors.New("Could not get the MQT CRD")
 	}
@@ -118,14 +118,14 @@ func (client *PreUpgradeTaskClient) LatestSchemaApplied() error {

 // VerifyFunctionSpecReferences verifies that a function references secrets, configmaps, pkgs in its own namespace and
 // outputs a list of functions that don't adhere to this requirement.
-func (client *PreUpgradeTaskClient) VerifyFunctionSpecReferences() {
+func (client *PreUpgradeTaskClient) VerifyFunctionSpecReferences(ctx context.Context) {
 	client.logger.Info("verifying function spec references for all functions in the cluster")

 	var err error
 	var fList *fv1.FunctionList

 	for i := 0; i < maxRetries; i++ {
-		fList, err = client.fissionClient.CoreV1().Functions(metav1.NamespaceAll).List(context.TODO(), metav1.ListOptions{})
+		fList, err = client.fissionClient.CoreV1().Functions(metav1.NamespaceAll).List(ctx, metav1.ListOptions{})
 		if err == nil {
 			break
 		}
@@ -143,26 +143,26 @@ func (client *PreUpgradeTaskClient) VerifyFunctionSpecReferences() {
 	for _, fn := range fList.Items {
 		secrets := fn.Spec.Secrets
 		for _, secret := range secrets {
-			if secret.Namespace != fn.ObjectMeta.Namespace {
+			if secret.Namespace != "" && secret.Namespace != fn.ObjectMeta.Namespace {
 				errs = multierror.Append(errs, fmt.Errorf("function : %s.%s cannot reference a secret : %s in namespace : %s", fn.ObjectMeta.Name, fn.ObjectMeta.Namespace, secret.Name, secret.Namespace))
 			}
 		}

 		configmaps := fn.Spec.ConfigMaps
 		for _, configmap := range configmaps {
-			if configmap.Namespace != fn.ObjectMeta.Namespace {
+			if configmap.Namespace != "" && configmap.Namespace != fn.ObjectMeta.Namespace {
 				errs = multierror.Append(errs, fmt.Errorf("function : %s.%s cannot reference a configmap : %s in namespace : %s", fn.ObjectMeta.Name, fn.ObjectMeta.Namespace, configmap.Name, configmap.Namespace))
 			}
 		}

-		if fn.Spec.Package.PackageRef.Namespace != fn.ObjectMeta.Namespace {
+		if fn.Spec.Package.PackageRef.Namespace != "" && fn.Spec.Package.PackageRef.Namespace != fn.ObjectMeta.Namespace {
 			errs = multierror.Append(errs, fmt.Errorf("function : %s.%s cannot reference a package : %s in namespace : %s", fn.ObjectMeta.Name, fn.ObjectMeta.Namespace, fn.Spec.Package.PackageRef.Name, fn.Spec.Package.PackageRef.Namespace))
 		}
 	}

 	if errs.ErrorOrNil() != nil {
 		client.logger.Fatal("installation failed",
-			zap.Error(err),
+			zap.Error(errs),
 			zap.String("summary", "a function cannot reference secrets, configmaps and packages outside it's own namespace"))
 	}

@@ -22,6 +22,7 @@ import (

 	"github.com/fission/fission/pkg/info"
 	"github.com/fission/fission/pkg/utils/loggerfactory"
+	"github.com/fission/fission/pkg/utils/signals"
 )

 func getStringArgWithDefault(arg interface{}, defaultValue string) string {
@@ -57,15 +58,16 @@ Options:
 			zap.Error(err))
 	}

-	crd := crdBackedClient.GetFunctionCRD()
+	ctx := signals.SetupSignalHandlerWithContext(logger)
+	crd := crdBackedClient.GetFunctionCRD(ctx)
 	if crd == nil {
 		logger.Info("nothing to do since CRDs are not present on the cluster")
 		return
 	}

-	err = crdBackedClient.LatestSchemaApplied()
+	err = crdBackedClient.LatestSchemaApplied(ctx)
 	if err != nil {
 		logger.Fatal("New CRDs are not applied")
 	}
-	crdBackedClient.VerifyFunctionSpecReferences()
+	crdBackedClient.VerifyFunctionSpecReferences(ctx)
 }
@@ -1,4 +1,4 @@
-FROM alpine:3.14
+FROM alpine:3.14.3
 RUN apk add --update ca-certificates
 COPY reporter /
 ENTRYPOINT ["/reporter"]
@@ -16,6 +16,7 @@ limitations under the License.
 package app

 import (
+	"context"
 	"log"

 	"github.com/spf13/cobra"
@@ -49,7 +50,8 @@ func eventCommandHandler(cmd *cobra.Command, args []string) error {
 		return err
 	}

-	return tracker.Tracker.SendEvent(event)
+	ctx := context.Background()
+	return tracker.Tracker.SendEvent(ctx, event)
 }

 //EventCommand reports an event to analytics
@@ -48,12 +48,12 @@ spec:
                    description: '(Optional) Container allows the modification of the deployed builder container using the Kubernetes Container spec. Fission overrides the following fields: - Name - Image; set to the Builder.Image - Command; set to the Builder.Command - TerminationMessagePath - ImagePullPolicy - ReadinessProbe'
                    properties:
                      args:
-                        description: 'Arguments to the entrypoint. The docker image''s CMD is used if this is not provided. Variable references $(VAR_NAME) are expanded using the container''s environment. If a variable cannot be resolved, the reference in the input string will be unchanged. The $(VAR_NAME) syntax can be escaped with a double $$, ie: $$(VAR_NAME). Escaped references will never be expanded, regardless of whether the variable exists or not. Cannot be updated. More info: https://kubernetes.io/docs/tasks/inject-data-application/define-command-argument-container/#running-a-command-in-a-shell'
+                        description: 'Arguments to the entrypoint. The docker image''s CMD is used if this is not provided. Variable references $(VAR_NAME) are expanded using the container''s environment. If a variable cannot be resolved, the reference in the input string will be unchanged. Double $$ are reduced to a single $, which allows for escaping the $(VAR_NAME) syntax: i.e. "$$(VAR_NAME)" will produce the string literal "$(VAR_NAME)". Escaped references will never be expanded, regardless of whether the variable exists or not. Cannot be updated. More info: https://kubernetes.io/docs/tasks/inject-data-application/define-command-argument-container/#running-a-command-in-a-shell'
                        items:
                          type: string
                        type: array
                      command:
-                        description: 'Entrypoint array. Not executed within a shell. The docker image''s ENTRYPOINT is used if this is not provided. Variable references $(VAR_NAME) are expanded using the container''s environment. If a variable cannot be resolved, the reference in the input string will be unchanged. The $(VAR_NAME) syntax can be escaped with a double $$, ie: $$(VAR_NAME). Escaped references will never be expanded, regardless of whether the variable exists or not. Cannot be updated. More info: https://kubernetes.io/docs/tasks/inject-data-application/define-command-argument-container/#running-a-command-in-a-shell'
+                        description: 'Entrypoint array. Not executed within a shell. The docker image''s ENTRYPOINT is used if this is not provided. Variable references $(VAR_NAME) are expanded using the container''s environment. If a variable cannot be resolved, the reference in the input string will be unchanged. Double $$ are reduced to a single $, which allows for escaping the $(VAR_NAME) syntax: i.e. "$$(VAR_NAME)" will produce the string literal "$(VAR_NAME)". Escaped references will never be expanded, regardless of whether the variable exists or not. Cannot be updated. More info: https://kubernetes.io/docs/tasks/inject-data-application/define-command-argument-container/#running-a-command-in-a-shell'
                        items:
                          type: string
                        type: array
@@ -66,7 +66,7 @@ spec:
                              description: Name of the environment variable. Must be a C_IDENTIFIER.
                              type: string
                            value:
-                              description: 'Variable references $(VAR_NAME) are expanded using the previous defined environment variables in the container and any service environment variables. If a variable cannot be resolved, the reference in the input string will be unchanged. The $(VAR_NAME) syntax can be escaped with a double $$, ie: $$(VAR_NAME). Escaped references will never be expanded, regardless of whether the variable exists or not. Defaults to "".'
+                              description: 'Variable references $(VAR_NAME) are expanded using the previously defined environment variables in the container and any service environment variables. If a variable cannot be resolved, the reference in the input string will be unchanged. Double $$ are reduced to a single $, which allows for escaping the $(VAR_NAME) syntax: i.e. "$$(VAR_NAME)" will produce the string literal "$(VAR_NAME)". Escaped references will never be expanded, regardless of whether the variable exists or not. Defaults to "".'
                              type: string
                            valueFrom:
                              description: Source for the environment variable's value. Cannot be used if value is not empty.
@@ -388,7 +388,7 @@ spec:
                            - port
                            type: object
                          terminationGracePeriodSeconds:
-                            description: Optional duration in seconds the pod needs to terminate gracefully upon probe failure. The grace period is the duration in seconds after the processes running in the pod are sent a termination signal and the time when the processes are forcibly halted with a kill signal. Set this value longer than the expected cleanup time for your process. If this value is nil, the pod's terminationGracePeriodSeconds will be used. Otherwise, this value overrides the value provided by the pod spec. Value must be non-negative integer. The value zero indicates stop immediately via the kill signal (no opportunity to shut down). This is an alpha field and requires enabling ProbeTerminationGracePeriod feature gate.
+                            description: Optional duration in seconds the pod needs to terminate gracefully upon probe failure. The grace period is the duration in seconds after the processes running in the pod are sent a termination signal and the time when the processes are forcibly halted with a kill signal. Set this value longer than the expected cleanup time for your process. If this value is nil, the pod's terminationGracePeriodSeconds will be used. Otherwise, this value overrides the value provided by the pod spec. Value must be non-negative integer. The value zero indicates stop immediately via the kill signal (no opportunity to shut down). This is a beta field and requires enabling ProbeTerminationGracePeriod feature gate. Minimum value is 1. spec.terminationGracePeriodSeconds is used if unset.
                            format: int64
                            type: integer
                          timeoutSeconds:
@@ -511,7 +511,7 @@ spec:
                            - port
                            type: object
                          terminationGracePeriodSeconds:
-                            description: Optional duration in seconds the pod needs to terminate gracefully upon probe failure. The grace period is the duration in seconds after the processes running in the pod are sent a termination signal and the time when the processes are forcibly halted with a kill signal. Set this value longer than the expected cleanup time for your process. If this value is nil, the pod's terminationGracePeriodSeconds will be used. Otherwise, this value overrides the value provided by the pod spec. Value must be non-negative integer. The value zero indicates stop immediately via the kill signal (no opportunity to shut down). This is an alpha field and requires enabling ProbeTerminationGracePeriod feature gate.
+                            description: Optional duration in seconds the pod needs to terminate gracefully upon probe failure. The grace period is the duration in seconds after the processes running in the pod are sent a termination signal and the time when the processes are forcibly halted with a kill signal. Set this value longer than the expected cleanup time for your process. If this value is nil, the pod's terminationGracePeriodSeconds will be used. Otherwise, this value overrides the value provided by the pod spec. Value must be non-negative integer. The value zero indicates stop immediately via the kill signal (no opportunity to shut down). This is a beta field and requires enabling ProbeTerminationGracePeriod feature gate. Minimum value is 1. spec.terminationGracePeriodSeconds is used if unset.
                            format: int64
                            type: integer
                          timeoutSeconds:
@@ -542,7 +542,7 @@ spec:
                            type: object
                        type: object
                      securityContext:
-                        description: 'Security options the pod should run with. More info: https://kubernetes.io/docs/concepts/policy/security-context/ More info: https://kubernetes.io/docs/tasks/configure-pod-container/security-context/'
+                        description: 'SecurityContext defines the security options the container should be run with. If set, the fields of SecurityContext override the equivalent fields of PodSecurityContext. More info: https://kubernetes.io/docs/tasks/configure-pod-container/security-context/'
                        properties:
                          allowPrivilegeEscalation:
                            description: 'AllowPrivilegeEscalation controls whether a process can gain more privileges than its parent process. This bool directly controls if the no_new_privs flag will be set on the container process. AllowPrivilegeEscalation is true always when the container is: 1) run as Privileged 2) has CAP_SYS_ADMIN'
@@ -620,6 +620,9 @@ spec:
                              gmsaCredentialSpecName:
                                description: GMSACredentialSpecName is the name of the GMSA credential spec to use.
                                type: string
+                              hostProcess:
+                                description: HostProcess determines if a container should be run as a 'Host Process' container. This field is alpha-level and will only be honored by components that enable the WindowsHostProcessContainers feature flag. Setting this field without the feature flag will result in errors when validating the Pod. All of a Pod's containers must have the same effective HostProcess value (it is not allowed to have a mix of HostProcess containers and non-HostProcess containers).  In addition, if HostProcess is true then HostNetwork must also be set to true.
+                                type: boolean
                              runAsUserName:
                                description: The UserName in Windows to run the entrypoint of the container process. Defaults to the user specified in image metadata if unspecified. May also be set in PodSecurityContext. If set in both SecurityContext and PodSecurityContext, the value specified in SecurityContext takes precedence.
                                type: string
@@ -706,7 +709,7 @@ spec:
                            - port
                            type: object
                          terminationGracePeriodSeconds:
-                            description: Optional duration in seconds the pod needs to terminate gracefully upon probe failure. The grace period is the duration in seconds after the processes running in the pod are sent a termination signal and the time when the processes are forcibly halted with a kill signal. Set this value longer than the expected cleanup time for your process. If this value is nil, the pod's terminationGracePeriodSeconds will be used. Otherwise, this value overrides the value provided by the pod spec. Value must be non-negative integer. The value zero indicates stop immediately via the kill signal (no opportunity to shut down). This is an alpha field and requires enabling ProbeTerminationGracePeriod feature gate.
+                            description: Optional duration in seconds the pod needs to terminate gracefully upon probe failure. The grace period is the duration in seconds after the processes running in the pod are sent a termination signal and the time when the processes are forcibly halted with a kill signal. Set this value longer than the expected cleanup time for your process. If this value is nil, the pod's terminationGracePeriodSeconds will be used. Otherwise, this value overrides the value provided by the pod spec. Value must be non-negative integer. The value zero indicates stop immediately via the kill signal (no opportunity to shut down). This is a beta field and requires enabling ProbeTerminationGracePeriod feature gate. Minimum value is 1. spec.terminationGracePeriodSeconds is used if unset.
                            format: int64
                            type: integer
                          timeoutSeconds:
@@ -953,7 +956,7 @@ spec:
                                              type: object
                                          type: object
                                        namespaceSelector:
-                                          description: A label query over the set of namespaces that the term applies to. The term is applied to the union of the namespaces selected by this field and the ones listed in the namespaces field. null selector and null or empty namespaces list means "this pod's namespace". An empty selector ({}) matches all namespaces. This field is alpha-level and is only honored when PodAffinityNamespaceSelector feature is enabled.
+                                          description: A label query over the set of namespaces that the term applies to. The term is applied to the union of the namespaces selected by this field and the ones listed in the namespaces field. null selector and null or empty namespaces list means "this pod's namespace". An empty selector ({}) matches all namespaces. This field is beta-level and is only honored when PodAffinityNamespaceSelector feature is enabled.
                                          properties:
                                            matchExpressions:
                                              description: matchExpressions is a list of label selector requirements. The requirements are ANDed.
@@ -1038,7 +1041,7 @@ spec:
                                          type: object
                                      type: object
                                    namespaceSelector:
-                                      description: A label query over the set of namespaces that the term applies to. The term is applied to the union of the namespaces selected by this field and the ones listed in the namespaces field. null selector and null or empty namespaces list means "this pod's namespace". An empty selector ({}) matches all namespaces. This field is alpha-level and is only honored when PodAffinityNamespaceSelector feature is enabled.
+                                      description: A label query over the set of namespaces that the term applies to. The term is applied to the union of the namespaces selected by this field and the ones listed in the namespaces field. null selector and null or empty namespaces list means "this pod's namespace". An empty selector ({}) matches all namespaces. This field is beta-level and is only honored when PodAffinityNamespaceSelector feature is enabled.
                                      properties:
                                        matchExpressions:
                                          description: matchExpressions is a list of label selector requirements. The requirements are ANDed.
@@ -1122,7 +1125,7 @@ spec:
                                              type: object
                                          type: object
                                        namespaceSelector:
-                                          description: A label query over the set of namespaces that the term applies to. The term is applied to the union of the namespaces selected by this field and the ones listed in the namespaces field. null selector and null or empty namespaces list means "this pod's namespace". An empty selector ({}) matches all namespaces. This field is alpha-level and is only honored when PodAffinityNamespaceSelector feature is enabled.
+                                          description: A label query over the set of namespaces that the term applies to. The term is applied to the union of the namespaces selected by this field and the ones listed in the namespaces field. null selector and null or empty namespaces list means "this pod's namespace". An empty selector ({}) matches all namespaces. This field is beta-level and is only honored when PodAffinityNamespaceSelector feature is enabled.
                                          properties:
                                            matchExpressions:
                                              description: matchExpressions is a list of label selector requirements. The requirements are ANDed.
@@ -1207,7 +1210,7 @@ spec:
                                          type: object
                                      type: object
                                    namespaceSelector:
-                                      description: A label query over the set of namespaces that the term applies to. The term is applied to the union of the namespaces selected by this field and the ones listed in the namespaces field. null selector and null or empty namespaces list means "this pod's namespace". An empty selector ({}) matches all namespaces. This field is alpha-level and is only honored when PodAffinityNamespaceSelector feature is enabled.
+                                      description: A label query over the set of namespaces that the term applies to. The term is applied to the union of the namespaces selected by this field and the ones listed in the namespaces field. null selector and null or empty namespaces list means "this pod's namespace". An empty selector ({}) matches all namespaces. This field is beta-level and is only honored when PodAffinityNamespaceSelector feature is enabled.
                                      properties:
                                        matchExpressions:
                                          description: matchExpressions is a list of label selector requirements. The requirements are ANDed.
@@ -1259,12 +1262,12 @@ spec:
                          description: A single application container that you want to run within a pod.
                          properties:
                            args:
-                              description: 'Arguments to the entrypoint. The docker image''s CMD is used if this is not provided. Variable references $(VAR_NAME) are expanded using the container''s environment. If a variable cannot be resolved, the reference in the input string will be unchanged. The $(VAR_NAME) syntax can be escaped with a double $$, ie: $$(VAR_NAME). Escaped references will never be expanded, regardless of whether the variable exists or not. Cannot be updated. More info: https://kubernetes.io/docs/tasks/inject-data-application/define-command-argument-container/#running-a-command-in-a-shell'
+                              description: 'Arguments to the entrypoint. The docker image''s CMD is used if this is not provided. Variable references $(VAR_NAME) are expanded using the container''s environment. If a variable cannot be resolved, the reference in the input string will be unchanged. Double $$ are reduced to a single $, which allows for escaping the $(VAR_NAME) syntax: i.e. "$$(VAR_NAME)" will produce the string literal "$(VAR_NAME)". Escaped references will never be expanded, regardless of whether the variable exists or not. Cannot be updated. More info: https://kubernetes.io/docs/tasks/inject-data-application/define-command-argument-container/#running-a-command-in-a-shell'
                              items:
                                type: string
                              type: array
                            command:
-                              description: 'Entrypoint array. Not executed within a shell. The docker image''s ENTRYPOINT is used if this is not provided. Variable references $(VAR_NAME) are expanded using the container''s environment. If a variable cannot be resolved, the reference in the input string will be unchanged. The $(VAR_NAME) syntax can be escaped with a double $$, ie: $$(VAR_NAME). Escaped references will never be expanded, regardless of whether the variable exists or not. Cannot be updated. More info: https://kubernetes.io/docs/tasks/inject-data-application/define-command-argument-container/#running-a-command-in-a-shell'
+                              description: 'Entrypoint array. Not executed within a shell. The docker image''s ENTRYPOINT is used if this is not provided. Variable references $(VAR_NAME) are expanded using the container''s environment. If a variable cannot be resolved, the reference in the input string will be unchanged. Double $$ are reduced to a single $, which allows for escaping the $(VAR_NAME) syntax: i.e. "$$(VAR_NAME)" will produce the string literal "$(VAR_NAME)". Escaped references will never be expanded, regardless of whether the variable exists or not. Cannot be updated. More info: https://kubernetes.io/docs/tasks/inject-data-application/define-command-argument-container/#running-a-command-in-a-shell'
                              items:
                                type: string
                              type: array
@@ -1277,7 +1280,7 @@ spec:
                                    description: Name of the environment variable. Must be a C_IDENTIFIER.
                                    type: string
                                  value:
-                                    description: 'Variable references $(VAR_NAME) are expanded using the previous defined environment variables in the container and any service environment variables. If a variable cannot be resolved, the reference in the input string will be unchanged. The $(VAR_NAME) syntax can be escaped with a double $$, ie: $$(VAR_NAME). Escaped references will never be expanded, regardless of whether the variable exists or not. Defaults to "".'
+                                    description: 'Variable references $(VAR_NAME) are expanded using the previously defined environment variables in the container and any service environment variables. If a variable cannot be resolved, the reference in the input string will be unchanged. Double $$ are reduced to a single $, which allows for escaping the $(VAR_NAME) syntax: i.e. "$$(VAR_NAME)" will produce the string literal "$(VAR_NAME)". Escaped references will never be expanded, regardless of whether the variable exists or not. Defaults to "".'
                                    type: string
                                  valueFrom:
                                    description: Source for the environment variable's value. Cannot be used if value is not empty.
@@ -1599,7 +1602,7 @@ spec:
                                  - port
                                  type: object
                                terminationGracePeriodSeconds:
-                                  description: Optional duration in seconds the pod needs to terminate gracefully upon probe failure. The grace period is the duration in seconds after the processes running in the pod are sent a termination signal and the time when the processes are forcibly halted with a kill signal. Set this value longer than the expected cleanup time for your process. If this value is nil, the pod's terminationGracePeriodSeconds will be used. Otherwise, this value overrides the value provided by the pod spec. Value must be non-negative integer. The value zero indicates stop immediately via the kill signal (no opportunity to shut down). This is an alpha field and requires enabling ProbeTerminationGracePeriod feature gate.
+                                  description: Optional duration in seconds the pod needs to terminate gracefully upon probe failure. The grace period is the duration in seconds after the processes running in the pod are sent a termination signal and the time when the processes are forcibly halted with a kill signal. Set this value longer than the expected cleanup time for your process. If this value is nil, the pod's terminationGracePeriodSeconds will be used. Otherwise, this value overrides the value provided by the pod spec. Value must be non-negative integer. The value zero indicates stop immediately via the kill signal (no opportunity to shut down). This is a beta field and requires enabling ProbeTerminationGracePeriod feature gate. Minimum value is 1. spec.terminationGracePeriodSeconds is used if unset.
                                  format: int64
                                  type: integer
                                timeoutSeconds:
@@ -1722,7 +1725,7 @@ spec:
                                  - port
                                  type: object
                                terminationGracePeriodSeconds:
-                                  description: Optional duration in seconds the pod needs to terminate gracefully upon probe failure. The grace period is the duration in seconds after the processes running in the pod are sent a termination signal and the time when the processes are forcibly halted with a kill signal. Set this value longer than the expected cleanup time for your process. If this value is nil, the pod's terminationGracePeriodSeconds will be used. Otherwise, this value overrides the value provided by the pod spec. Value must be non-negative integer. The value zero indicates stop immediately via the kill signal (no opportunity to shut down). This is an alpha field and requires enabling ProbeTerminationGracePeriod feature gate.
+                                  description: Optional duration in seconds the pod needs to terminate gracefully upon probe failure. The grace period is the duration in seconds after the processes running in the pod are sent a termination signal and the time when the processes are forcibly halted with a kill signal. Set this value longer than the expected cleanup time for your process. If this value is nil, the pod's terminationGracePeriodSeconds will be used. Otherwise, this value overrides the value provided by the pod spec. Value must be non-negative integer. The value zero indicates stop immediately via the kill signal (no opportunity to shut down). This is a beta field and requires enabling ProbeTerminationGracePeriod feature gate. Minimum value is 1. spec.terminationGracePeriodSeconds is used if unset.
                                  format: int64
                                  type: integer
                                timeoutSeconds:
@@ -1753,7 +1756,7 @@ spec:
                                  type: object
                              type: object
                            securityContext:
-                              description: 'Security options the pod should run with. More info: https://kubernetes.io/docs/concepts/policy/security-context/ More info: https://kubernetes.io/docs/tasks/configure-pod-container/security-context/'
+                              description: 'SecurityContext defines the security options the container should be run with. If set, the fields of SecurityContext override the equivalent fields of PodSecurityContext. More info: https://kubernetes.io/docs/tasks/configure-pod-container/security-context/'
                              properties:
                                allowPrivilegeEscalation:
                                  description: 'AllowPrivilegeEscalation controls whether a process can gain more privileges than its parent process. This bool directly controls if the no_new_privs flag will be set on the container process. AllowPrivilegeEscalation is true always when the container is: 1) run as Privileged 2) has CAP_SYS_ADMIN'
@@ -1831,6 +1834,9 @@ spec:
                                    gmsaCredentialSpecName:
                                      description: GMSACredentialSpecName is the name of the GMSA credential spec to use.
                                      type: string
+                                    hostProcess:
+                                      description: HostProcess determines if a container should be run as a 'Host Process' container. This field is alpha-level and will only be honored by components that enable the WindowsHostProcessContainers feature flag. Setting this field without the feature flag will result in errors when validating the Pod. All of a Pod's containers must have the same effective HostProcess value (it is not allowed to have a mix of HostProcess containers and non-HostProcess containers).  In addition, if HostProcess is true then HostNetwork must also be set to true.
+                                      type: boolean
                                    runAsUserName:
                                      description: The UserName in Windows to run the entrypoint of the container process. Defaults to the user specified in image metadata if unspecified. May also be set in PodSecurityContext. If set in both SecurityContext and PodSecurityContext, the value specified in SecurityContext takes precedence.
                                      type: string
@@ -1917,7 +1923,7 @@ spec:
                                  - port
                                  type: object
                                terminationGracePeriodSeconds:
-                                  description: Optional duration in seconds the pod needs to terminate gracefully upon probe failure. The grace period is the duration in seconds after the processes running in the pod are sent a termination signal and the time when the processes are forcibly halted with a kill signal. Set this value longer than the expected cleanup time for your process. If this value is nil, the pod's terminationGracePeriodSeconds will be used. Otherwise, this value overrides the value provided by the pod spec. Value must be non-negative integer. The value zero indicates stop immediately via the kill signal (no opportunity to shut down). This is an alpha field and requires enabling ProbeTerminationGracePeriod feature gate.
+                                  description: Optional duration in seconds the pod needs to terminate gracefully upon probe failure. The grace period is the duration in seconds after the processes running in the pod are sent a termination signal and the time when the processes are forcibly halted with a kill signal. Set this value longer than the expected cleanup time for your process. If this value is nil, the pod's terminationGracePeriodSeconds will be used. Otherwise, this value overrides the value provided by the pod spec. Value must be non-negative integer. The value zero indicates stop immediately via the kill signal (no opportunity to shut down). This is a beta field and requires enabling ProbeTerminationGracePeriod feature gate. Minimum value is 1. spec.terminationGracePeriodSeconds is used if unset.
                                  format: int64
                                  type: integer
                                timeoutSeconds:
@@ -2029,12 +2035,12 @@ spec:
                          description: An EphemeralContainer is a container that may be added temporarily to an existing pod for user-initiated activities such as debugging. Ephemeral containers have no resource or scheduling guarantees, and they will not be restarted when they exit or when a pod is removed or restarted. If an ephemeral container causes a pod to exceed its resource allocation, the pod may be evicted. Ephemeral containers may not be added by directly updating the pod spec. They must be added via the pod's ephemeralcontainers subresource, and they will appear in the pod spec once added. This is an alpha feature enabled by the EphemeralContainers feature flag.
                          properties:
                            args:
-                              description: 'Arguments to the entrypoint. The docker image''s CMD is used if this is not provided. Variable references $(VAR_NAME) are expanded using the container''s environment. If a variable cannot be resolved, the reference in the input string will be unchanged. The $(VAR_NAME) syntax can be escaped with a double $$, ie: $$(VAR_NAME). Escaped references will never be expanded, regardless of whether the variable exists or not. Cannot be updated. More info: https://kubernetes.io/docs/tasks/inject-data-application/define-command-argument-container/#running-a-command-in-a-shell'
+                              description: 'Arguments to the entrypoint. The docker image''s CMD is used if this is not provided. Variable references $(VAR_NAME) are expanded using the container''s environment. If a variable cannot be resolved, the reference in the input string will be unchanged. Double $$ are reduced to a single $, which allows for escaping the $(VAR_NAME) syntax: i.e. "$$(VAR_NAME)" will produce the string literal "$(VAR_NAME)". Escaped references will never be expanded, regardless of whether the variable exists or not. Cannot be updated. More info: https://kubernetes.io/docs/tasks/inject-data-application/define-command-argument-container/#running-a-command-in-a-shell'
                              items:
                                type: string
                              type: array
                            command:
-                              description: 'Entrypoint array. Not executed within a shell. The docker image''s ENTRYPOINT is used if this is not provided. Variable references $(VAR_NAME) are expanded using the container''s environment. If a variable cannot be resolved, the reference in the input string will be unchanged. The $(VAR_NAME) syntax can be escaped with a double $$, ie: $$(VAR_NAME). Escaped references will never be expanded, regardless of whether the variable exists or not. Cannot be updated. More info: https://kubernetes.io/docs/tasks/inject-data-application/define-command-argument-container/#running-a-command-in-a-shell'
+                              description: 'Entrypoint array. Not executed within a shell. The docker image''s ENTRYPOINT is used if this is not provided. Variable references $(VAR_NAME) are expanded using the container''s environment. If a variable cannot be resolved, the reference in the input string will be unchanged. Double $$ are reduced to a single $, which allows for escaping the $(VAR_NAME) syntax: i.e. "$$(VAR_NAME)" will produce the string literal "$(VAR_NAME)". Escaped references will never be expanded, regardless of whether the variable exists or not. Cannot be updated. More info: https://kubernetes.io/docs/tasks/inject-data-application/define-command-argument-container/#running-a-command-in-a-shell'
                              items:
                                type: string
                              type: array
@@ -2047,7 +2053,7 @@ spec:
                                    description: Name of the environment variable. Must be a C_IDENTIFIER.
                                    type: string
                                  value:
-                                    description: 'Variable references $(VAR_NAME) are expanded using the previous defined environment variables in the container and any service environment variables. If a variable cannot be resolved, the reference in the input string will be unchanged. The $(VAR_NAME) syntax can be escaped with a double $$, ie: $$(VAR_NAME). Escaped references will never be expanded, regardless of whether the variable exists or not. Defaults to "".'
+                                    description: 'Variable references $(VAR_NAME) are expanded using the previously defined environment variables in the container and any service environment variables. If a variable cannot be resolved, the reference in the input string will be unchanged. Double $$ are reduced to a single $, which allows for escaping the $(VAR_NAME) syntax: i.e. "$$(VAR_NAME)" will produce the string literal "$(VAR_NAME)". Escaped references will never be expanded, regardless of whether the variable exists or not. Defaults to "".'
                                    type: string
                                  valueFrom:
                                    description: Source for the environment variable's value. Cannot be used if value is not empty.
@@ -2369,7 +2375,7 @@ spec:
                                  - port
                                  type: object
                                terminationGracePeriodSeconds:
-                                  description: Optional duration in seconds the pod needs to terminate gracefully upon probe failure. The grace period is the duration in seconds after the processes running in the pod are sent a termination signal and the time when the processes are forcibly halted with a kill signal. Set this value longer than the expected cleanup time for your process. If this value is nil, the pod's terminationGracePeriodSeconds will be used. Otherwise, this value overrides the value provided by the pod spec. Value must be non-negative integer. The value zero indicates stop immediately via the kill signal (no opportunity to shut down). This is an alpha field and requires enabling ProbeTerminationGracePeriod feature gate.
+                                  description: Optional duration in seconds the pod needs to terminate gracefully upon probe failure. The grace period is the duration in seconds after the processes running in the pod are sent a termination signal and the time when the processes are forcibly halted with a kill signal. Set this value longer than the expected cleanup time for your process. If this value is nil, the pod's terminationGracePeriodSeconds will be used. Otherwise, this value overrides the value provided by the pod spec. Value must be non-negative integer. The value zero indicates stop immediately via the kill signal (no opportunity to shut down). This is a beta field and requires enabling ProbeTerminationGracePeriod feature gate. Minimum value is 1. spec.terminationGracePeriodSeconds is used if unset.
                                  format: int64
                                  type: integer
                                timeoutSeconds:
@@ -2488,7 +2494,7 @@ spec:
                                  - port
                                  type: object
                                terminationGracePeriodSeconds:
-                                  description: Optional duration in seconds the pod needs to terminate gracefully upon probe failure. The grace period is the duration in seconds after the processes running in the pod are sent a termination signal and the time when the processes are forcibly halted with a kill signal. Set this value longer than the expected cleanup time for your process. If this value is nil, the pod's terminationGracePeriodSeconds will be used. Otherwise, this value overrides the value provided by the pod spec. Value must be non-negative integer. The value zero indicates stop immediately via the kill signal (no opportunity to shut down). This is an alpha field and requires enabling ProbeTerminationGracePeriod feature gate.
+                                  description: Optional duration in seconds the pod needs to terminate gracefully upon probe failure. The grace period is the duration in seconds after the processes running in the pod are sent a termination signal and the time when the processes are forcibly halted with a kill signal. Set this value longer than the expected cleanup time for your process. If this value is nil, the pod's terminationGracePeriodSeconds will be used. Otherwise, this value overrides the value provided by the pod spec. Value must be non-negative integer. The value zero indicates stop immediately via the kill signal (no opportunity to shut down). This is a beta field and requires enabling ProbeTerminationGracePeriod feature gate. Minimum value is 1. spec.terminationGracePeriodSeconds is used if unset.
                                  format: int64
                                  type: integer
                                timeoutSeconds:
@@ -2519,7 +2525,7 @@ spec:
                                  type: object
                              type: object
                            securityContext:
-                              description: SecurityContext is not allowed for ephemeral containers.
+                              description: 'Optional: SecurityContext defines the security options the ephemeral container should be run with. If set, the fields of SecurityContext override the equivalent fields of PodSecurityContext.'
                              properties:
                                allowPrivilegeEscalation:
                                  description: 'AllowPrivilegeEscalation controls whether a process can gain more privileges than its parent process. This bool directly controls if the no_new_privs flag will be set on the container process. AllowPrivilegeEscalation is true always when the container is: 1) run as Privileged 2) has CAP_SYS_ADMIN'
@@ -2597,6 +2603,9 @@ spec:
                                    gmsaCredentialSpecName:
                                      description: GMSACredentialSpecName is the name of the GMSA credential spec to use.
                                      type: string
+                                    hostProcess:
+                                      description: HostProcess determines if a container should be run as a 'Host Process' container. This field is alpha-level and will only be honored by components that enable the WindowsHostProcessContainers feature flag. Setting this field without the feature flag will result in errors when validating the Pod. All of a Pod's containers must have the same effective HostProcess value (it is not allowed to have a mix of HostProcess containers and non-HostProcess containers).  In addition, if HostProcess is true then HostNetwork must also be set to true.
+                                      type: boolean
                                    runAsUserName:
                                      description: The UserName in Windows to run the entrypoint of the container process. Defaults to the user specified in image metadata if unspecified. May also be set in PodSecurityContext. If set in both SecurityContext and PodSecurityContext, the value specified in SecurityContext takes precedence.
                                      type: string
@@ -2683,7 +2692,7 @@ spec:
                                  - port
                                  type: object
                                terminationGracePeriodSeconds:
-                                  description: Optional duration in seconds the pod needs to terminate gracefully upon probe failure. The grace period is the duration in seconds after the processes running in the pod are sent a termination signal and the time when the processes are forcibly halted with a kill signal. Set this value longer than the expected cleanup time for your process. If this value is nil, the pod's terminationGracePeriodSeconds will be used. Otherwise, this value overrides the value provided by the pod spec. Value must be non-negative integer. The value zero indicates stop immediately via the kill signal (no opportunity to shut down). This is an alpha field and requires enabling ProbeTerminationGracePeriod feature gate.
+                                  description: Optional duration in seconds the pod needs to terminate gracefully upon probe failure. The grace period is the duration in seconds after the processes running in the pod are sent a termination signal and the time when the processes are forcibly halted with a kill signal. Set this value longer than the expected cleanup time for your process. If this value is nil, the pod's terminationGracePeriodSeconds will be used. Otherwise, this value overrides the value provided by the pod spec. Value must be non-negative integer. The value zero indicates stop immediately via the kill signal (no opportunity to shut down). This is a beta field and requires enabling ProbeTerminationGracePeriod feature gate. Minimum value is 1. spec.terminationGracePeriodSeconds is used if unset.
                                  format: int64
                                  type: integer
                                timeoutSeconds:
@@ -2803,12 +2812,12 @@ spec:
                          description: A single application container that you want to run within a pod.
                          properties:
                            args:
-                              description: 'Arguments to the entrypoint. The docker image''s CMD is used if this is not provided. Variable references $(VAR_NAME) are expanded using the container''s environment. If a variable cannot be resolved, the reference in the input string will be unchanged. The $(VAR_NAME) syntax can be escaped with a double $$, ie: $$(VAR_NAME). Escaped references will never be expanded, regardless of whether the variable exists or not. Cannot be updated. More info: https://kubernetes.io/docs/tasks/inject-data-application/define-command-argument-container/#running-a-command-in-a-shell'
+                              description: 'Arguments to the entrypoint. The docker image''s CMD is used if this is not provided. Variable references $(VAR_NAME) are expanded using the container''s environment. If a variable cannot be resolved, the reference in the input string will be unchanged. Double $$ are reduced to a single $, which allows for escaping the $(VAR_NAME) syntax: i.e. "$$(VAR_NAME)" will produce the string literal "$(VAR_NAME)". Escaped references will never be expanded, regardless of whether the variable exists or not. Cannot be updated. More info: https://kubernetes.io/docs/tasks/inject-data-application/define-command-argument-container/#running-a-command-in-a-shell'
                              items:
                                type: string
                              type: array
                            command:
-                              description: 'Entrypoint array. Not executed within a shell. The docker image''s ENTRYPOINT is used if this is not provided. Variable references $(VAR_NAME) are expanded using the container''s environment. If a variable cannot be resolved, the reference in the input string will be unchanged. The $(VAR_NAME) syntax can be escaped with a double $$, ie: $$(VAR_NAME). Escaped references will never be expanded, regardless of whether the variable exists or not. Cannot be updated. More info: https://kubernetes.io/docs/tasks/inject-data-application/define-command-argument-container/#running-a-command-in-a-shell'
+                              description: 'Entrypoint array. Not executed within a shell. The docker image''s ENTRYPOINT is used if this is not provided. Variable references $(VAR_NAME) are expanded using the container''s environment. If a variable cannot be resolved, the reference in the input string will be unchanged. Double $$ are reduced to a single $, which allows for escaping the $(VAR_NAME) syntax: i.e. "$$(VAR_NAME)" will produce the string literal "$(VAR_NAME)". Escaped references will never be expanded, regardless of whether the variable exists or not. Cannot be updated. More info: https://kubernetes.io/docs/tasks/inject-data-application/define-command-argument-container/#running-a-command-in-a-shell'
                              items:
                                type: string
                              type: array
@@ -2821,7 +2830,7 @@ spec:
                                    description: Name of the environment variable. Must be a C_IDENTIFIER.
                                    type: string
                                  value:
-                                    description: 'Variable references $(VAR_NAME) are expanded using the previous defined environment variables in the container and any service environment variables. If a variable cannot be resolved, the reference in the input string will be unchanged. The $(VAR_NAME) syntax can be escaped with a double $$, ie: $$(VAR_NAME). Escaped references will never be expanded, regardless of whether the variable exists or not. Defaults to "".'
+                                    description: 'Variable references $(VAR_NAME) are expanded using the previously defined environment variables in the container and any service environment variables. If a variable cannot be resolved, the reference in the input string will be unchanged. Double $$ are reduced to a single $, which allows for escaping the $(VAR_NAME) syntax: i.e. "$$(VAR_NAME)" will produce the string literal "$(VAR_NAME)". Escaped references will never be expanded, regardless of whether the variable exists or not. Defaults to "".'
                                    type: string
                                  valueFrom:
                                    description: Source for the environment variable's value. Cannot be used if value is not empty.
@@ -3143,7 +3152,7 @@ spec:
                                  - port
                                  type: object
                                terminationGracePeriodSeconds:
-                                  description: Optional duration in seconds the pod needs to terminate gracefully upon probe failure. The grace period is the duration in seconds after the processes running in the pod are sent a termination signal and the time when the processes are forcibly halted with a kill signal. Set this value longer than the expected cleanup time for your process. If this value is nil, the pod's terminationGracePeriodSeconds will be used. Otherwise, this value overrides the value provided by the pod spec. Value must be non-negative integer. The value zero indicates stop immediately via the kill signal (no opportunity to shut down). This is an alpha field and requires enabling ProbeTerminationGracePeriod feature gate.
+                                  description: Optional duration in seconds the pod needs to terminate gracefully upon probe failure. The grace period is the duration in seconds after the processes running in the pod are sent a termination signal and the time when the processes are forcibly halted with a kill signal. Set this value longer than the expected cleanup time for your process. If this value is nil, the pod's terminationGracePeriodSeconds will be used. Otherwise, this value overrides the value provided by the pod spec. Value must be non-negative integer. The value zero indicates stop immediately via the kill signal (no opportunity to shut down). This is a beta field and requires enabling ProbeTerminationGracePeriod feature gate. Minimum value is 1. spec.terminationGracePeriodSeconds is used if unset.
                                  format: int64
                                  type: integer
                                timeoutSeconds:
@@ -3266,7 +3275,7 @@ spec:
                                  - port
                                  type: object
                                terminationGracePeriodSeconds:
-                                  description: Optional duration in seconds the pod needs to terminate gracefully upon probe failure. The grace period is the duration in seconds after the processes running in the pod are sent a termination signal and the time when the processes are forcibly halted with a kill signal. Set this value longer than the expected cleanup time for your process. If this value is nil, the pod's terminationGracePeriodSeconds will be used. Otherwise, this value overrides the value provided by the pod spec. Value must be non-negative integer. The value zero indicates stop immediately via the kill signal (no opportunity to shut down). This is an alpha field and requires enabling ProbeTerminationGracePeriod feature gate.
+                                  description: Optional duration in seconds the pod needs to terminate gracefully upon probe failure. The grace period is the duration in seconds after the processes running in the pod are sent a termination signal and the time when the processes are forcibly halted with a kill signal. Set this value longer than the expected cleanup time for your process. If this value is nil, the pod's terminationGracePeriodSeconds will be used. Otherwise, this value overrides the value provided by the pod spec. Value must be non-negative integer. The value zero indicates stop immediately via the kill signal (no opportunity to shut down). This is a beta field and requires enabling ProbeTerminationGracePeriod feature gate. Minimum value is 1. spec.terminationGracePeriodSeconds is used if unset.
                                  format: int64
                                  type: integer
                                timeoutSeconds:
@@ -3297,7 +3306,7 @@ spec:
                                  type: object
                              type: object
                            securityContext:
-                              description: 'Security options the pod should run with. More info: https://kubernetes.io/docs/concepts/policy/security-context/ More info: https://kubernetes.io/docs/tasks/configure-pod-container/security-context/'
+                              description: 'SecurityContext defines the security options the container should be run with. If set, the fields of SecurityContext override the equivalent fields of PodSecurityContext. More info: https://kubernetes.io/docs/tasks/configure-pod-container/security-context/'
                              properties:
                                allowPrivilegeEscalation:
                                  description: 'AllowPrivilegeEscalation controls whether a process can gain more privileges than its parent process. This bool directly controls if the no_new_privs flag will be set on the container process. AllowPrivilegeEscalation is true always when the container is: 1) run as Privileged 2) has CAP_SYS_ADMIN'
@@ -3375,6 +3384,9 @@ spec:
                                    gmsaCredentialSpecName:
                                      description: GMSACredentialSpecName is the name of the GMSA credential spec to use.
                                      type: string
+                                    hostProcess:
+                                      description: HostProcess determines if a container should be run as a 'Host Process' container. This field is alpha-level and will only be honored by components that enable the WindowsHostProcessContainers feature flag. Setting this field without the feature flag will result in errors when validating the Pod. All of a Pod's containers must have the same effective HostProcess value (it is not allowed to have a mix of HostProcess containers and non-HostProcess containers).  In addition, if HostProcess is true then HostNetwork must also be set to true.
+                                      type: boolean
                                    runAsUserName:
                                      description: The UserName in Windows to run the entrypoint of the container process. Defaults to the user specified in image metadata if unspecified. May also be set in PodSecurityContext. If set in both SecurityContext and PodSecurityContext, the value specified in SecurityContext takes precedence.
                                      type: string
@@ -3461,7 +3473,7 @@ spec:
                                  - port
                                  type: object
                                terminationGracePeriodSeconds:
-                                  description: Optional duration in seconds the pod needs to terminate gracefully upon probe failure. The grace period is the duration in seconds after the processes running in the pod are sent a termination signal and the time when the processes are forcibly halted with a kill signal. Set this value longer than the expected cleanup time for your process. If this value is nil, the pod's terminationGracePeriodSeconds will be used. Otherwise, this value overrides the value provided by the pod spec. Value must be non-negative integer. The value zero indicates stop immediately via the kill signal (no opportunity to shut down). This is an alpha field and requires enabling ProbeTerminationGracePeriod feature gate.
+                                  description: Optional duration in seconds the pod needs to terminate gracefully upon probe failure. The grace period is the duration in seconds after the processes running in the pod are sent a termination signal and the time when the processes are forcibly halted with a kill signal. Set this value longer than the expected cleanup time for your process. If this value is nil, the pod's terminationGracePeriodSeconds will be used. Otherwise, this value overrides the value provided by the pod spec. Value must be non-negative integer. The value zero indicates stop immediately via the kill signal (no opportunity to shut down). This is a beta field and requires enabling ProbeTerminationGracePeriod feature gate. Minimum value is 1. spec.terminationGracePeriodSeconds is used if unset.
                                  format: int64
                                  type: integer
                                timeoutSeconds:
@@ -3543,6 +3555,7 @@ spec:
                          type: string
                        description: 'NodeSelector is a selector which must be true for the pod to fit on a node. Selector which must match a node''s labels for the pod to be scheduled on that node. More info: https://kubernetes.io/docs/concepts/configuration/assign-pod-node/'
                        type: object
+                        x-kubernetes-map-type: atomic
                      overhead:
                        additionalProperties:
                          anyOf:
@@ -3550,7 +3563,7 @@ spec:
                          - type: string
                          pattern: ^(\+|-)?(([0-9]+(\.[0-9]*)?)|(\.[0-9]+))(([KMGTPE]i)|[numkMGTPE]|([eE](\+|-)?(([0-9]+(\.[0-9]*)?)|(\.[0-9]+))))?$
                          x-kubernetes-int-or-string: true
-                        description: 'Overhead represents the resource overhead associated with running a pod for a given RuntimeClass. This field will be autopopulated at admission time by the RuntimeClass admission controller. If the RuntimeClass admission controller is enabled, overhead must not be set in Pod create requests. The RuntimeClass admission controller will reject Pod create requests which have the overhead already set. If RuntimeClass is configured and selected in the PodSpec, Overhead will be set to the value defined in the corresponding RuntimeClass, otherwise it will remain unset and treated as zero. More info: https://git.k8s.io/enhancements/keps/sig-node/20190226-pod-overhead.md This field is alpha-level as of Kubernetes v1.16, and is only honored by servers that enable the PodOverhead feature.'
+                        description: 'Overhead represents the resource overhead associated with running a pod for a given RuntimeClass. This field will be autopopulated at admission time by the RuntimeClass admission controller. If the RuntimeClass admission controller is enabled, overhead must not be set in Pod create requests. The RuntimeClass admission controller will reject Pod create requests which have the overhead already set. If RuntimeClass is configured and selected in the PodSpec, Overhead will be set to the value defined in the corresponding RuntimeClass, otherwise it will remain unset and treated as zero. More info: https://git.k8s.io/enhancements/keps/sig-node/688-pod-overhead/README.md This field is beta-level as of Kubernetes v1.18, and is only honored by servers that enable the PodOverhead feature.'
                        type: object
                      preemptionPolicy:
                        description: PreemptionPolicy is the Policy for preempting pods with lower priority. One of Never, PreemptLowerPriority. Defaults to PreemptLowerPriority if unset. This field is beta-level, gated by the NonPreemptingPriority feature-gate.
@@ -3563,7 +3576,7 @@ spec:
                        description: If specified, indicates the pod's priority. "system-node-critical" and "system-cluster-critical" are two special keywords which indicate the highest priorities with the former being the highest priority. Any other name must be defined by creating a PriorityClass object with that name. If not specified, the pod priority will be default or zero if there is no default.
                        type: string
                      readinessGates:
-                        description: 'If specified, all readiness gates will be evaluated for pod readiness. A pod is ready when all its containers are ready AND all conditions specified in the readiness gates have status equal to "True" More info: https://git.k8s.io/enhancements/keps/sig-network/0007-pod-ready%2B%2B.md'
+                        description: 'If specified, all readiness gates will be evaluated for pod readiness. A pod is ready when all its containers are ready AND all conditions specified in the readiness gates have status equal to "True" More info: https://git.k8s.io/enhancements/keps/sig-network/580-pod-readiness-gates'
                        items:
                          description: PodReadinessGate contains the reference to a pod condition
                          properties:
@@ -3578,7 +3591,7 @@ spec:
                        description: 'Restart policy for all containers within the pod. One of Always, OnFailure, Never. Default to Always. More info: https://kubernetes.io/docs/concepts/workloads/pods/pod-lifecycle/#restart-policy'
                        type: string
                      runtimeClassName:
-                        description: 'RuntimeClassName refers to a RuntimeClass object in the node.k8s.io group, which should be used to run this pod.  If no RuntimeClass resource matches the named class, the pod will not be run. If unset or empty, the "legacy" RuntimeClass will be used, which is an implicit class with an empty definition that uses the default runtime handler. More info: https://git.k8s.io/enhancements/keps/sig-node/runtime-class.md This is a beta feature as of Kubernetes v1.14.'
+                        description: 'RuntimeClassName refers to a RuntimeClass object in the node.k8s.io group, which should be used to run this pod.  If no RuntimeClass resource matches the named class, the pod will not be run. If unset or empty, the "legacy" RuntimeClass will be used, which is an implicit class with an empty definition that uses the default runtime handler. More info: https://git.k8s.io/enhancements/keps/sig-node/585-runtime-class This is a beta feature as of Kubernetes v1.14.'
                        type: string
                      schedulerName:
                        description: If specified, the pod will be dispatched by specified scheduler. If not specified, the pod will be dispatched by default scheduler.
@@ -3663,6 +3676,9 @@ spec:
                              gmsaCredentialSpecName:
                                description: GMSACredentialSpecName is the name of the GMSA credential spec to use.
                                type: string
+                              hostProcess:
+                                description: HostProcess determines if a container should be run as a 'Host Process' container. This field is alpha-level and will only be honored by components that enable the WindowsHostProcessContainers feature flag. Setting this field without the feature flag will result in errors when validating the Pod. All of a Pod's containers must have the same effective HostProcess value (it is not allowed to have a mix of HostProcess containers and non-HostProcess containers).  In addition, if HostProcess is true then HostNetwork must also be set to true.
+                                type: boolean
                              runAsUserName:
                                description: The UserName in Windows to run the entrypoint of the container process. Defaults to the user specified in image metadata if unspecified. May also be set in PodSecurityContext. If set in both SecurityContext and PodSecurityContext, the value specified in SecurityContext takes precedence.
                                type: string
@@ -4030,7 +4046,23 @@ spec:
                                            type: string
                                          type: array
                                        dataSource:
-                                          description: 'This field can be used to specify either: * An existing VolumeSnapshot object (snapshot.storage.k8s.io/VolumeSnapshot) * An existing PVC (PersistentVolumeClaim) * An existing custom resource that implements data population (Alpha) In order to use custom resource types that implement data population, the AnyVolumeDataSource feature gate must be enabled. If the provisioner or an external controller can support the specified data source, it will create a new volume based on the contents of the specified data source.'
+                                          description: 'This field can be used to specify either: * An existing VolumeSnapshot object (snapshot.storage.k8s.io/VolumeSnapshot) * An existing PVC (PersistentVolumeClaim) If the provisioner or an external controller can support the specified data source, it will create a new volume based on the contents of the specified data source. If the AnyVolumeDataSource feature gate is enabled, this field will always have the same contents as the DataSourceRef field.'
+                                          properties:
+                                            apiGroup:
+                                              description: APIGroup is the group for the resource being referenced. If APIGroup is not specified, the specified Kind must be in the core API group. For any other third-party types, APIGroup is required.
+                                              type: string
+                                            kind:
+                                              description: Kind is the type of resource being referenced
+                                              type: string
+                                            name:
+                                              description: Name is the name of resource being referenced
+                                              type: string
+                                          required:
+                                          - kind
+                                          - name
+                                          type: object
+                                        dataSourceRef:
+                                          description: 'Specifies the object from which to populate the volume with data, if a non-empty volume is desired. This may be any local object from a non-empty API group (non core object) or a PersistentVolumeClaim object. When this field is specified, volume binding will only succeed if the type of the specified object matches some installed volume populator or dynamic provisioner. This field will replace the functionality of the DataSource field and as such if both fields are non-empty, they must have the same value. For backwards compatibility, both fields (DataSource and DataSourceRef) will be set to the same value automatically if one of them is empty and the other is non-empty. There are two important differences between DataSource and DataSourceRef: * While DataSource only allows two specific types of objects, DataSourceRef   allows any non-core object, as well as PersistentVolumeClaim objects. * While DataSource ignores disallowed values (dropping them), DataSourceRef   preserves all values, and generates an error if a disallowed value is   specified. (Alpha) Using this field requires the AnyVolumeDataSource feature gate to be enabled.'
                                          properties:
                                            apiGroup:
                                              description: APIGroup is the group for the resource being referenced. If APIGroup is not specified, the specified Kind must be in the core API group. For any other third-party types, APIGroup is required.
@@ -4707,12 +4739,12 @@ spec:
                    description: "(Optional) Container allows the modification of the deployed runtime container using the Kubernetes Container spec. Fission overrides the following fields: - Name - Image; set to the Runtime.Image - TerminationMessagePath - ImagePullPolicy \n You can set either PodSpec or Container, but not both. kubebuilder:validation:XPreserveUnknownFields=true"
                    properties:
                      args:
-                        description: 'Arguments to the entrypoint. The docker image''s CMD is used if this is not provided. Variable references $(VAR_NAME) are expanded using the container''s environment. If a variable cannot be resolved, the reference in the input string will be unchanged. The $(VAR_NAME) syntax can be escaped with a double $$, ie: $$(VAR_NAME). Escaped references will never be expanded, regardless of whether the variable exists or not. Cannot be updated. More info: https://kubernetes.io/docs/tasks/inject-data-application/define-command-argument-container/#running-a-command-in-a-shell'
+                        description: 'Arguments to the entrypoint. The docker image''s CMD is used if this is not provided. Variable references $(VAR_NAME) are expanded using the container''s environment. If a variable cannot be resolved, the reference in the input string will be unchanged. Double $$ are reduced to a single $, which allows for escaping the $(VAR_NAME) syntax: i.e. "$$(VAR_NAME)" will produce the string literal "$(VAR_NAME)". Escaped references will never be expanded, regardless of whether the variable exists or not. Cannot be updated. More info: https://kubernetes.io/docs/tasks/inject-data-application/define-command-argument-container/#running-a-command-in-a-shell'
                        items:
                          type: string
                        type: array
                      command:
-                        description: 'Entrypoint array. Not executed within a shell. The docker image''s ENTRYPOINT is used if this is not provided. Variable references $(VAR_NAME) are expanded using the container''s environment. If a variable cannot be resolved, the reference in the input string will be unchanged. The $(VAR_NAME) syntax can be escaped with a double $$, ie: $$(VAR_NAME). Escaped references will never be expanded, regardless of whether the variable exists or not. Cannot be updated. More info: https://kubernetes.io/docs/tasks/inject-data-application/define-command-argument-container/#running-a-command-in-a-shell'
+                        description: 'Entrypoint array. Not executed within a shell. The docker image''s ENTRYPOINT is used if this is not provided. Variable references $(VAR_NAME) are expanded using the container''s environment. If a variable cannot be resolved, the reference in the input string will be unchanged. Double $$ are reduced to a single $, which allows for escaping the $(VAR_NAME) syntax: i.e. "$$(VAR_NAME)" will produce the string literal "$(VAR_NAME)". Escaped references will never be expanded, regardless of whether the variable exists or not. Cannot be updated. More info: https://kubernetes.io/docs/tasks/inject-data-application/define-command-argument-container/#running-a-command-in-a-shell'
                        items:
                          type: string
                        type: array
@@ -4725,7 +4757,7 @@ spec:
                              description: Name of the environment variable. Must be a C_IDENTIFIER.
                              type: string
                            value:
-                              description: 'Variable references $(VAR_NAME) are expanded using the previous defined environment variables in the container and any service environment variables. If a variable cannot be resolved, the reference in the input string will be unchanged. The $(VAR_NAME) syntax can be escaped with a double $$, ie: $$(VAR_NAME). Escaped references will never be expanded, regardless of whether the variable exists or not. Defaults to "".'
+                              description: 'Variable references $(VAR_NAME) are expanded using the previously defined environment variables in the container and any service environment variables. If a variable cannot be resolved, the reference in the input string will be unchanged. Double $$ are reduced to a single $, which allows for escaping the $(VAR_NAME) syntax: i.e. "$$(VAR_NAME)" will produce the string literal "$(VAR_NAME)". Escaped references will never be expanded, regardless of whether the variable exists or not. Defaults to "".'
                              type: string
                            valueFrom:
                              description: Source for the environment variable's value. Cannot be used if value is not empty.
@@ -5047,7 +5079,7 @@ spec:
                            - port
                            type: object
                          terminationGracePeriodSeconds:
-                            description: Optional duration in seconds the pod needs to terminate gracefully upon probe failure. The grace period is the duration in seconds after the processes running in the pod are sent a termination signal and the time when the processes are forcibly halted with a kill signal. Set this value longer than the expected cleanup time for your process. If this value is nil, the pod's terminationGracePeriodSeconds will be used. Otherwise, this value overrides the value provided by the pod spec. Value must be non-negative integer. The value zero indicates stop immediately via the kill signal (no opportunity to shut down). This is an alpha field and requires enabling ProbeTerminationGracePeriod feature gate.
+                            description: Optional duration in seconds the pod needs to terminate gracefully upon probe failure. The grace period is the duration in seconds after the processes running in the pod are sent a termination signal and the time when the processes are forcibly halted with a kill signal. Set this value longer than the expected cleanup time for your process. If this value is nil, the pod's terminationGracePeriodSeconds will be used. Otherwise, this value overrides the value provided by the pod spec. Value must be non-negative integer. The value zero indicates stop immediately via the kill signal (no opportunity to shut down). This is a beta field and requires enabling ProbeTerminationGracePeriod feature gate. Minimum value is 1. spec.terminationGracePeriodSeconds is used if unset.
                            format: int64
                            type: integer
                          timeoutSeconds:
@@ -5170,7 +5202,7 @@ spec:
                            - port
                            type: object
                          terminationGracePeriodSeconds:
-                            description: Optional duration in seconds the pod needs to terminate gracefully upon probe failure. The grace period is the duration in seconds after the processes running in the pod are sent a termination signal and the time when the processes are forcibly halted with a kill signal. Set this value longer than the expected cleanup time for your process. If this value is nil, the pod's terminationGracePeriodSeconds will be used. Otherwise, this value overrides the value provided by the pod spec. Value must be non-negative integer. The value zero indicates stop immediately via the kill signal (no opportunity to shut down). This is an alpha field and requires enabling ProbeTerminationGracePeriod feature gate.
+                            description: Optional duration in seconds the pod needs to terminate gracefully upon probe failure. The grace period is the duration in seconds after the processes running in the pod are sent a termination signal and the time when the processes are forcibly halted with a kill signal. Set this value longer than the expected cleanup time for your process. If this value is nil, the pod's terminationGracePeriodSeconds will be used. Otherwise, this value overrides the value provided by the pod spec. Value must be non-negative integer. The value zero indicates stop immediately via the kill signal (no opportunity to shut down). This is a beta field and requires enabling ProbeTerminationGracePeriod feature gate. Minimum value is 1. spec.terminationGracePeriodSeconds is used if unset.
                            format: int64
                            type: integer
                          timeoutSeconds:
@@ -5201,7 +5233,7 @@ spec:
                            type: object
                        type: object
                      securityContext:
-                        description: 'Security options the pod should run with. More info: https://kubernetes.io/docs/concepts/policy/security-context/ More info: https://kubernetes.io/docs/tasks/configure-pod-container/security-context/'
+                        description: 'SecurityContext defines the security options the container should be run with. If set, the fields of SecurityContext override the equivalent fields of PodSecurityContext. More info: https://kubernetes.io/docs/tasks/configure-pod-container/security-context/'
                        properties:
                          allowPrivilegeEscalation:
                            description: 'AllowPrivilegeEscalation controls whether a process can gain more privileges than its parent process. This bool directly controls if the no_new_privs flag will be set on the container process. AllowPrivilegeEscalation is true always when the container is: 1) run as Privileged 2) has CAP_SYS_ADMIN'
@@ -5279,6 +5311,9 @@ spec:
                              gmsaCredentialSpecName:
                                description: GMSACredentialSpecName is the name of the GMSA credential spec to use.
                                type: string
+                              hostProcess:
+                                description: HostProcess determines if a container should be run as a 'Host Process' container. This field is alpha-level and will only be honored by components that enable the WindowsHostProcessContainers feature flag. Setting this field without the feature flag will result in errors when validating the Pod. All of a Pod's containers must have the same effective HostProcess value (it is not allowed to have a mix of HostProcess containers and non-HostProcess containers).  In addition, if HostProcess is true then HostNetwork must also be set to true.
+                                type: boolean
                              runAsUserName:
                                description: The UserName in Windows to run the entrypoint of the container process. Defaults to the user specified in image metadata if unspecified. May also be set in PodSecurityContext. If set in both SecurityContext and PodSecurityContext, the value specified in SecurityContext takes precedence.
                                type: string
@@ -5365,7 +5400,7 @@ spec:
                            - port
                            type: object
                          terminationGracePeriodSeconds:
-                            description: Optional duration in seconds the pod needs to terminate gracefully upon probe failure. The grace period is the duration in seconds after the processes running in the pod are sent a termination signal and the time when the processes are forcibly halted with a kill signal. Set this value longer than the expected cleanup time for your process. If this value is nil, the pod's terminationGracePeriodSeconds will be used. Otherwise, this value overrides the value provided by the pod spec. Value must be non-negative integer. The value zero indicates stop immediately via the kill signal (no opportunity to shut down). This is an alpha field and requires enabling ProbeTerminationGracePeriod feature gate.
+                            description: Optional duration in seconds the pod needs to terminate gracefully upon probe failure. The grace period is the duration in seconds after the processes running in the pod are sent a termination signal and the time when the processes are forcibly halted with a kill signal. Set this value longer than the expected cleanup time for your process. If this value is nil, the pod's terminationGracePeriodSeconds will be used. Otherwise, this value overrides the value provided by the pod spec. Value must be non-negative integer. The value zero indicates stop immediately via the kill signal (no opportunity to shut down). This is a beta field and requires enabling ProbeTerminationGracePeriod feature gate. Minimum value is 1. spec.terminationGracePeriodSeconds is used if unset.
                            format: int64
                            type: integer
                          timeoutSeconds:
@@ -5612,7 +5647,7 @@ spec:
                                              type: object
                                          type: object
                                        namespaceSelector:
-                                          description: A label query over the set of namespaces that the term applies to. The term is applied to the union of the namespaces selected by this field and the ones listed in the namespaces field. null selector and null or empty namespaces list means "this pod's namespace". An empty selector ({}) matches all namespaces. This field is alpha-level and is only honored when PodAffinityNamespaceSelector feature is enabled.
+                                          description: A label query over the set of namespaces that the term applies to. The term is applied to the union of the namespaces selected by this field and the ones listed in the namespaces field. null selector and null or empty namespaces list means "this pod's namespace". An empty selector ({}) matches all namespaces. This field is beta-level and is only honored when PodAffinityNamespaceSelector feature is enabled.
                                          properties:
                                            matchExpressions:
                                              description: matchExpressions is a list of label selector requirements. The requirements are ANDed.
@@ -5697,7 +5732,7 @@ spec:
                                          type: object
                                      type: object
                                    namespaceSelector:
-                                      description: A label query over the set of namespaces that the term applies to. The term is applied to the union of the namespaces selected by this field and the ones listed in the namespaces field. null selector and null or empty namespaces list means "this pod's namespace". An empty selector ({}) matches all namespaces. This field is alpha-level and is only honored when PodAffinityNamespaceSelector feature is enabled.
+                                      description: A label query over the set of namespaces that the term applies to. The term is applied to the union of the namespaces selected by this field and the ones listed in the namespaces field. null selector and null or empty namespaces list means "this pod's namespace". An empty selector ({}) matches all namespaces. This field is beta-level and is only honored when PodAffinityNamespaceSelector feature is enabled.
                                      properties:
                                        matchExpressions:
                                          description: matchExpressions is a list of label selector requirements. The requirements are ANDed.
@@ -5781,7 +5816,7 @@ spec:
                                              type: object
                                          type: object
                                        namespaceSelector:
-                                          description: A label query over the set of namespaces that the term applies to. The term is applied to the union of the namespaces selected by this field and the ones listed in the namespaces field. null selector and null or empty namespaces list means "this pod's namespace". An empty selector ({}) matches all namespaces. This field is alpha-level and is only honored when PodAffinityNamespaceSelector feature is enabled.
+                                          description: A label query over the set of namespaces that the term applies to. The term is applied to the union of the namespaces selected by this field and the ones listed in the namespaces field. null selector and null or empty namespaces list means "this pod's namespace". An empty selector ({}) matches all namespaces. This field is beta-level and is only honored when PodAffinityNamespaceSelector feature is enabled.
                                          properties:
                                            matchExpressions:
                                              description: matchExpressions is a list of label selector requirements. The requirements are ANDed.
@@ -5866,7 +5901,7 @@ spec:
                                          type: object
                                      type: object
                                    namespaceSelector:
-                                      description: A label query over the set of namespaces that the term applies to. The term is applied to the union of the namespaces selected by this field and the ones listed in the namespaces field. null selector and null or empty namespaces list means "this pod's namespace". An empty selector ({}) matches all namespaces. This field is alpha-level and is only honored when PodAffinityNamespaceSelector feature is enabled.
+                                      description: A label query over the set of namespaces that the term applies to. The term is applied to the union of the namespaces selected by this field and the ones listed in the namespaces field. null selector and null or empty namespaces list means "this pod's namespace". An empty selector ({}) matches all namespaces. This field is beta-level and is only honored when PodAffinityNamespaceSelector feature is enabled.
                                      properties:
                                        matchExpressions:
                                          description: matchExpressions is a list of label selector requirements. The requirements are ANDed.
@@ -5918,12 +5953,12 @@ spec:
                          description: A single application container that you want to run within a pod.
                          properties:
                            args:
-                              description: 'Arguments to the entrypoint. The docker image''s CMD is used if this is not provided. Variable references $(VAR_NAME) are expanded using the container''s environment. If a variable cannot be resolved, the reference in the input string will be unchanged. The $(VAR_NAME) syntax can be escaped with a double $$, ie: $$(VAR_NAME). Escaped references will never be expanded, regardless of whether the variable exists or not. Cannot be updated. More info: https://kubernetes.io/docs/tasks/inject-data-application/define-command-argument-container/#running-a-command-in-a-shell'
+                              description: 'Arguments to the entrypoint. The docker image''s CMD is used if this is not provided. Variable references $(VAR_NAME) are expanded using the container''s environment. If a variable cannot be resolved, the reference in the input string will be unchanged. Double $$ are reduced to a single $, which allows for escaping the $(VAR_NAME) syntax: i.e. "$$(VAR_NAME)" will produce the string literal "$(VAR_NAME)". Escaped references will never be expanded, regardless of whether the variable exists or not. Cannot be updated. More info: https://kubernetes.io/docs/tasks/inject-data-application/define-command-argument-container/#running-a-command-in-a-shell'
                              items:
                                type: string
                              type: array
                            command:
-                              description: 'Entrypoint array. Not executed within a shell. The docker image''s ENTRYPOINT is used if this is not provided. Variable references $(VAR_NAME) are expanded using the container''s environment. If a variable cannot be resolved, the reference in the input string will be unchanged. The $(VAR_NAME) syntax can be escaped with a double $$, ie: $$(VAR_NAME). Escaped references will never be expanded, regardless of whether the variable exists or not. Cannot be updated. More info: https://kubernetes.io/docs/tasks/inject-data-application/define-command-argument-container/#running-a-command-in-a-shell'
+                              description: 'Entrypoint array. Not executed within a shell. The docker image''s ENTRYPOINT is used if this is not provided. Variable references $(VAR_NAME) are expanded using the container''s environment. If a variable cannot be resolved, the reference in the input string will be unchanged. Double $$ are reduced to a single $, which allows for escaping the $(VAR_NAME) syntax: i.e. "$$(VAR_NAME)" will produce the string literal "$(VAR_NAME)". Escaped references will never be expanded, regardless of whether the variable exists or not. Cannot be updated. More info: https://kubernetes.io/docs/tasks/inject-data-application/define-command-argument-container/#running-a-command-in-a-shell'
                              items:
                                type: string
                              type: array
@@ -5936,7 +5971,7 @@ spec:
                                    description: Name of the environment variable. Must be a C_IDENTIFIER.
                                    type: string
                                  value:
-                                    description: 'Variable references $(VAR_NAME) are expanded using the previous defined environment variables in the container and any service environment variables. If a variable cannot be resolved, the reference in the input string will be unchanged. The $(VAR_NAME) syntax can be escaped with a double $$, ie: $$(VAR_NAME). Escaped references will never be expanded, regardless of whether the variable exists or not. Defaults to "".'
+                                    description: 'Variable references $(VAR_NAME) are expanded using the previously defined environment variables in the container and any service environment variables. If a variable cannot be resolved, the reference in the input string will be unchanged. Double $$ are reduced to a single $, which allows for escaping the $(VAR_NAME) syntax: i.e. "$$(VAR_NAME)" will produce the string literal "$(VAR_NAME)". Escaped references will never be expanded, regardless of whether the variable exists or not. Defaults to "".'
                                    type: string
                                  valueFrom:
                                    description: Source for the environment variable's value. Cannot be used if value is not empty.
@@ -6258,7 +6293,7 @@ spec:
                                  - port
                                  type: object
                                terminationGracePeriodSeconds:
-                                  description: Optional duration in seconds the pod needs to terminate gracefully upon probe failure. The grace period is the duration in seconds after the processes running in the pod are sent a termination signal and the time when the processes are forcibly halted with a kill signal. Set this value longer than the expected cleanup time for your process. If this value is nil, the pod's terminationGracePeriodSeconds will be used. Otherwise, this value overrides the value provided by the pod spec. Value must be non-negative integer. The value zero indicates stop immediately via the kill signal (no opportunity to shut down). This is an alpha field and requires enabling ProbeTerminationGracePeriod feature gate.
+                                  description: Optional duration in seconds the pod needs to terminate gracefully upon probe failure. The grace period is the duration in seconds after the processes running in the pod are sent a termination signal and the time when the processes are forcibly halted with a kill signal. Set this value longer than the expected cleanup time for your process. If this value is nil, the pod's terminationGracePeriodSeconds will be used. Otherwise, this value overrides the value provided by the pod spec. Value must be non-negative integer. The value zero indicates stop immediately via the kill signal (no opportunity to shut down). This is a beta field and requires enabling ProbeTerminationGracePeriod feature gate. Minimum value is 1. spec.terminationGracePeriodSeconds is used if unset.
                                  format: int64
                                  type: integer
                                timeoutSeconds:
@@ -6381,7 +6416,7 @@ spec:
                                  - port
                                  type: object
                                terminationGracePeriodSeconds:
-                                  description: Optional duration in seconds the pod needs to terminate gracefully upon probe failure. The grace period is the duration in seconds after the processes running in the pod are sent a termination signal and the time when the processes are forcibly halted with a kill signal. Set this value longer than the expected cleanup time for your process. If this value is nil, the pod's terminationGracePeriodSeconds will be used. Otherwise, this value overrides the value provided by the pod spec. Value must be non-negative integer. The value zero indicates stop immediately via the kill signal (no opportunity to shut down). This is an alpha field and requires enabling ProbeTerminationGracePeriod feature gate.
+                                  description: Optional duration in seconds the pod needs to terminate gracefully upon probe failure. The grace period is the duration in seconds after the processes running in the pod are sent a termination signal and the time when the processes are forcibly halted with a kill signal. Set this value longer than the expected cleanup time for your process. If this value is nil, the pod's terminationGracePeriodSeconds will be used. Otherwise, this value overrides the value provided by the pod spec. Value must be non-negative integer. The value zero indicates stop immediately via the kill signal (no opportunity to shut down). This is a beta field and requires enabling ProbeTerminationGracePeriod feature gate. Minimum value is 1. spec.terminationGracePeriodSeconds is used if unset.
                                  format: int64
                                  type: integer
                                timeoutSeconds:
@@ -6412,7 +6447,7 @@ spec:
                                  type: object
                              type: object
                            securityContext:
-                              description: 'Security options the pod should run with. More info: https://kubernetes.io/docs/concepts/policy/security-context/ More info: https://kubernetes.io/docs/tasks/configure-pod-container/security-context/'
+                              description: 'SecurityContext defines the security options the container should be run with. If set, the fields of SecurityContext override the equivalent fields of PodSecurityContext. More info: https://kubernetes.io/docs/tasks/configure-pod-container/security-context/'
                              properties:
                                allowPrivilegeEscalation:
                                  description: 'AllowPrivilegeEscalation controls whether a process can gain more privileges than its parent process. This bool directly controls if the no_new_privs flag will be set on the container process. AllowPrivilegeEscalation is true always when the container is: 1) run as Privileged 2) has CAP_SYS_ADMIN'
@@ -6490,6 +6525,9 @@ spec:
                                    gmsaCredentialSpecName:
                                      description: GMSACredentialSpecName is the name of the GMSA credential spec to use.
                                      type: string
+                                    hostProcess:
+                                      description: HostProcess determines if a container should be run as a 'Host Process' container. This field is alpha-level and will only be honored by components that enable the WindowsHostProcessContainers feature flag. Setting this field without the feature flag will result in errors when validating the Pod. All of a Pod's containers must have the same effective HostProcess value (it is not allowed to have a mix of HostProcess containers and non-HostProcess containers).  In addition, if HostProcess is true then HostNetwork must also be set to true.
+                                      type: boolean
                                    runAsUserName:
                                      description: The UserName in Windows to run the entrypoint of the container process. Defaults to the user specified in image metadata if unspecified. May also be set in PodSecurityContext. If set in both SecurityContext and PodSecurityContext, the value specified in SecurityContext takes precedence.
                                      type: string
@@ -6576,7 +6614,7 @@ spec:
                                  - port
                                  type: object
                                terminationGracePeriodSeconds:
-                                  description: Optional duration in seconds the pod needs to terminate gracefully upon probe failure. The grace period is the duration in seconds after the processes running in the pod are sent a termination signal and the time when the processes are forcibly halted with a kill signal. Set this value longer than the expected cleanup time for your process. If this value is nil, the pod's terminationGracePeriodSeconds will be used. Otherwise, this value overrides the value provided by the pod spec. Value must be non-negative integer. The value zero indicates stop immediately via the kill signal (no opportunity to shut down). This is an alpha field and requires enabling ProbeTerminationGracePeriod feature gate.
+                                  description: Optional duration in seconds the pod needs to terminate gracefully upon probe failure. The grace period is the duration in seconds after the processes running in the pod are sent a termination signal and the time when the processes are forcibly halted with a kill signal. Set this value longer than the expected cleanup time for your process. If this value is nil, the pod's terminationGracePeriodSeconds will be used. Otherwise, this value overrides the value provided by the pod spec. Value must be non-negative integer. The value zero indicates stop immediately via the kill signal (no opportunity to shut down). This is a beta field and requires enabling ProbeTerminationGracePeriod feature gate. Minimum value is 1. spec.terminationGracePeriodSeconds is used if unset.
                                  format: int64
                                  type: integer
                                timeoutSeconds:
@@ -6688,12 +6726,12 @@ spec:
                          description: An EphemeralContainer is a container that may be added temporarily to an existing pod for user-initiated activities such as debugging. Ephemeral containers have no resource or scheduling guarantees, and they will not be restarted when they exit or when a pod is removed or restarted. If an ephemeral container causes a pod to exceed its resource allocation, the pod may be evicted. Ephemeral containers may not be added by directly updating the pod spec. They must be added via the pod's ephemeralcontainers subresource, and they will appear in the pod spec once added. This is an alpha feature enabled by the EphemeralContainers feature flag.
                          properties:
                            args:
-                              description: 'Arguments to the entrypoint. The docker image''s CMD is used if this is not provided. Variable references $(VAR_NAME) are expanded using the container''s environment. If a variable cannot be resolved, the reference in the input string will be unchanged. The $(VAR_NAME) syntax can be escaped with a double $$, ie: $$(VAR_NAME). Escaped references will never be expanded, regardless of whether the variable exists or not. Cannot be updated. More info: https://kubernetes.io/docs/tasks/inject-data-application/define-command-argument-container/#running-a-command-in-a-shell'
+                              description: 'Arguments to the entrypoint. The docker image''s CMD is used if this is not provided. Variable references $(VAR_NAME) are expanded using the container''s environment. If a variable cannot be resolved, the reference in the input string will be unchanged. Double $$ are reduced to a single $, which allows for escaping the $(VAR_NAME) syntax: i.e. "$$(VAR_NAME)" will produce the string literal "$(VAR_NAME)". Escaped references will never be expanded, regardless of whether the variable exists or not. Cannot be updated. More info: https://kubernetes.io/docs/tasks/inject-data-application/define-command-argument-container/#running-a-command-in-a-shell'
                              items:
                                type: string
                              type: array
                            command:
-                              description: 'Entrypoint array. Not executed within a shell. The docker image''s ENTRYPOINT is used if this is not provided. Variable references $(VAR_NAME) are expanded using the container''s environment. If a variable cannot be resolved, the reference in the input string will be unchanged. The $(VAR_NAME) syntax can be escaped with a double $$, ie: $$(VAR_NAME). Escaped references will never be expanded, regardless of whether the variable exists or not. Cannot be updated. More info: https://kubernetes.io/docs/tasks/inject-data-application/define-command-argument-container/#running-a-command-in-a-shell'
+                              description: 'Entrypoint array. Not executed within a shell. The docker image''s ENTRYPOINT is used if this is not provided. Variable references $(VAR_NAME) are expanded using the container''s environment. If a variable cannot be resolved, the reference in the input string will be unchanged. Double $$ are reduced to a single $, which allows for escaping the $(VAR_NAME) syntax: i.e. "$$(VAR_NAME)" will produce the string literal "$(VAR_NAME)". Escaped references will never be expanded, regardless of whether the variable exists or not. Cannot be updated. More info: https://kubernetes.io/docs/tasks/inject-data-application/define-command-argument-container/#running-a-command-in-a-shell'
                              items:
                                type: string
                              type: array
@@ -6706,7 +6744,7 @@ spec:
                                    description: Name of the environment variable. Must be a C_IDENTIFIER.
                                    type: string
                                  value:
-                                    description: 'Variable references $(VAR_NAME) are expanded using the previous defined environment variables in the container and any service environment variables. If a variable cannot be resolved, the reference in the input string will be unchanged. The $(VAR_NAME) syntax can be escaped with a double $$, ie: $$(VAR_NAME). Escaped references will never be expanded, regardless of whether the variable exists or not. Defaults to "".'
+                                    description: 'Variable references $(VAR_NAME) are expanded using the previously defined environment variables in the container and any service environment variables. If a variable cannot be resolved, the reference in the input string will be unchanged. Double $$ are reduced to a single $, which allows for escaping the $(VAR_NAME) syntax: i.e. "$$(VAR_NAME)" will produce the string literal "$(VAR_NAME)". Escaped references will never be expanded, regardless of whether the variable exists or not. Defaults to "".'
                                    type: string
                                  valueFrom:
                                    description: Source for the environment variable's value. Cannot be used if value is not empty.
@@ -7028,7 +7066,7 @@ spec:
                                  - port
                                  type: object
                                terminationGracePeriodSeconds:
-                                  description: Optional duration in seconds the pod needs to terminate gracefully upon probe failure. The grace period is the duration in seconds after the processes running in the pod are sent a termination signal and the time when the processes are forcibly halted with a kill signal. Set this value longer than the expected cleanup time for your process. If this value is nil, the pod's terminationGracePeriodSeconds will be used. Otherwise, this value overrides the value provided by the pod spec. Value must be non-negative integer. The value zero indicates stop immediately via the kill signal (no opportunity to shut down). This is an alpha field and requires enabling ProbeTerminationGracePeriod feature gate.
+                                  description: Optional duration in seconds the pod needs to terminate gracefully upon probe failure. The grace period is the duration in seconds after the processes running in the pod are sent a termination signal and the time when the processes are forcibly halted with a kill signal. Set this value longer than the expected cleanup time for your process. If this value is nil, the pod's terminationGracePeriodSeconds will be used. Otherwise, this value overrides the value provided by the pod spec. Value must be non-negative integer. The value zero indicates stop immediately via the kill signal (no opportunity to shut down). This is a beta field and requires enabling ProbeTerminationGracePeriod feature gate. Minimum value is 1. spec.terminationGracePeriodSeconds is used if unset.
                                  format: int64
                                  type: integer
                                timeoutSeconds:
@@ -7147,7 +7185,7 @@ spec:
                                  - port
                                  type: object
                                terminationGracePeriodSeconds:
-                                  description: Optional duration in seconds the pod needs to terminate gracefully upon probe failure. The grace period is the duration in seconds after the processes running in the pod are sent a termination signal and the time when the processes are forcibly halted with a kill signal. Set this value longer than the expected cleanup time for your process. If this value is nil, the pod's terminationGracePeriodSeconds will be used. Otherwise, this value overrides the value provided by the pod spec. Value must be non-negative integer. The value zero indicates stop immediately via the kill signal (no opportunity to shut down). This is an alpha field and requires enabling ProbeTerminationGracePeriod feature gate.
+                                  description: Optional duration in seconds the pod needs to terminate gracefully upon probe failure. The grace period is the duration in seconds after the processes running in the pod are sent a termination signal and the time when the processes are forcibly halted with a kill signal. Set this value longer than the expected cleanup time for your process. If this value is nil, the pod's terminationGracePeriodSeconds will be used. Otherwise, this value overrides the value provided by the pod spec. Value must be non-negative integer. The value zero indicates stop immediately via the kill signal (no opportunity to shut down). This is a beta field and requires enabling ProbeTerminationGracePeriod feature gate. Minimum value is 1. spec.terminationGracePeriodSeconds is used if unset.
                                  format: int64
                                  type: integer
                                timeoutSeconds:
@@ -7178,7 +7216,7 @@ spec:
                                  type: object
                              type: object
                            securityContext:
-                              description: SecurityContext is not allowed for ephemeral containers.
+                              description: 'Optional: SecurityContext defines the security options the ephemeral container should be run with. If set, the fields of SecurityContext override the equivalent fields of PodSecurityContext.'
                              properties:
                                allowPrivilegeEscalation:
                                  description: 'AllowPrivilegeEscalation controls whether a process can gain more privileges than its parent process. This bool directly controls if the no_new_privs flag will be set on the container process. AllowPrivilegeEscalation is true always when the container is: 1) run as Privileged 2) has CAP_SYS_ADMIN'
@@ -7256,6 +7294,9 @@ spec:
                                    gmsaCredentialSpecName:
                                      description: GMSACredentialSpecName is the name of the GMSA credential spec to use.
                                      type: string
+                                    hostProcess:
+                                      description: HostProcess determines if a container should be run as a 'Host Process' container. This field is alpha-level and will only be honored by components that enable the WindowsHostProcessContainers feature flag. Setting this field without the feature flag will result in errors when validating the Pod. All of a Pod's containers must have the same effective HostProcess value (it is not allowed to have a mix of HostProcess containers and non-HostProcess containers).  In addition, if HostProcess is true then HostNetwork must also be set to true.
+                                      type: boolean
                                    runAsUserName:
                                      description: The UserName in Windows to run the entrypoint of the container process. Defaults to the user specified in image metadata if unspecified. May also be set in PodSecurityContext. If set in both SecurityContext and PodSecurityContext, the value specified in SecurityContext takes precedence.
                                      type: string
@@ -7342,7 +7383,7 @@ spec:
                                  - port
                                  type: object
                                terminationGracePeriodSeconds:
-                                  description: Optional duration in seconds the pod needs to terminate gracefully upon probe failure. The grace period is the duration in seconds after the processes running in the pod are sent a termination signal and the time when the processes are forcibly halted with a kill signal. Set this value longer than the expected cleanup time for your process. If this value is nil, the pod's terminationGracePeriodSeconds will be used. Otherwise, this value overrides the value provided by the pod spec. Value must be non-negative integer. The value zero indicates stop immediately via the kill signal (no opportunity to shut down). This is an alpha field and requires enabling ProbeTerminationGracePeriod feature gate.
+                                  description: Optional duration in seconds the pod needs to terminate gracefully upon probe failure. The grace period is the duration in seconds after the processes running in the pod are sent a termination signal and the time when the processes are forcibly halted with a kill signal. Set this value longer than the expected cleanup time for your process. If this value is nil, the pod's terminationGracePeriodSeconds will be used. Otherwise, this value overrides the value provided by the pod spec. Value must be non-negative integer. The value zero indicates stop immediately via the kill signal (no opportunity to shut down). This is a beta field and requires enabling ProbeTerminationGracePeriod feature gate. Minimum value is 1. spec.terminationGracePeriodSeconds is used if unset.
                                  format: int64
                                  type: integer
                                timeoutSeconds:
@@ -7462,12 +7503,12 @@ spec:
                          description: A single application container that you want to run within a pod.
                          properties:
                            args:
-                              description: 'Arguments to the entrypoint. The docker image''s CMD is used if this is not provided. Variable references $(VAR_NAME) are expanded using the container''s environment. If a variable cannot be resolved, the reference in the input string will be unchanged. The $(VAR_NAME) syntax can be escaped with a double $$, ie: $$(VAR_NAME). Escaped references will never be expanded, regardless of whether the variable exists or not. Cannot be updated. More info: https://kubernetes.io/docs/tasks/inject-data-application/define-command-argument-container/#running-a-command-in-a-shell'
+                              description: 'Arguments to the entrypoint. The docker image''s CMD is used if this is not provided. Variable references $(VAR_NAME) are expanded using the container''s environment. If a variable cannot be resolved, the reference in the input string will be unchanged. Double $$ are reduced to a single $, which allows for escaping the $(VAR_NAME) syntax: i.e. "$$(VAR_NAME)" will produce the string literal "$(VAR_NAME)". Escaped references will never be expanded, regardless of whether the variable exists or not. Cannot be updated. More info: https://kubernetes.io/docs/tasks/inject-data-application/define-command-argument-container/#running-a-command-in-a-shell'
                              items:
                                type: string
                              type: array
                            command:
-                              description: 'Entrypoint array. Not executed within a shell. The docker image''s ENTRYPOINT is used if this is not provided. Variable references $(VAR_NAME) are expanded using the container''s environment. If a variable cannot be resolved, the reference in the input string will be unchanged. The $(VAR_NAME) syntax can be escaped with a double $$, ie: $$(VAR_NAME). Escaped references will never be expanded, regardless of whether the variable exists or not. Cannot be updated. More info: https://kubernetes.io/docs/tasks/inject-data-application/define-command-argument-container/#running-a-command-in-a-shell'
+                              description: 'Entrypoint array. Not executed within a shell. The docker image''s ENTRYPOINT is used if this is not provided. Variable references $(VAR_NAME) are expanded using the container''s environment. If a variable cannot be resolved, the reference in the input string will be unchanged. Double $$ are reduced to a single $, which allows for escaping the $(VAR_NAME) syntax: i.e. "$$(VAR_NAME)" will produce the string literal "$(VAR_NAME)". Escaped references will never be expanded, regardless of whether the variable exists or not. Cannot be updated. More info: https://kubernetes.io/docs/tasks/inject-data-application/define-command-argument-container/#running-a-command-in-a-shell'
                              items:
                                type: string
                              type: array
@@ -7480,7 +7521,7 @@ spec:
                                    description: Name of the environment variable. Must be a C_IDENTIFIER.
                                    type: string
                                  value:
-                                    description: 'Variable references $(VAR_NAME) are expanded using the previous defined environment variables in the container and any service environment variables. If a variable cannot be resolved, the reference in the input string will be unchanged. The $(VAR_NAME) syntax can be escaped with a double $$, ie: $$(VAR_NAME). Escaped references will never be expanded, regardless of whether the variable exists or not. Defaults to "".'
+                                    description: 'Variable references $(VAR_NAME) are expanded using the previously defined environment variables in the container and any service environment variables. If a variable cannot be resolved, the reference in the input string will be unchanged. Double $$ are reduced to a single $, which allows for escaping the $(VAR_NAME) syntax: i.e. "$$(VAR_NAME)" will produce the string literal "$(VAR_NAME)". Escaped references will never be expanded, regardless of whether the variable exists or not. Defaults to "".'
                                    type: string
                                  valueFrom:
                                    description: Source for the environment variable's value. Cannot be used if value is not empty.
@@ -7802,7 +7843,7 @@ spec:
                                  - port
                                  type: object
                                terminationGracePeriodSeconds:
-                                  description: Optional duration in seconds the pod needs to terminate gracefully upon probe failure. The grace period is the duration in seconds after the processes running in the pod are sent a termination signal and the time when the processes are forcibly halted with a kill signal. Set this value longer than the expected cleanup time for your process. If this value is nil, the pod's terminationGracePeriodSeconds will be used. Otherwise, this value overrides the value provided by the pod spec. Value must be non-negative integer. The value zero indicates stop immediately via the kill signal (no opportunity to shut down). This is an alpha field and requires enabling ProbeTerminationGracePeriod feature gate.
+                                  description: Optional duration in seconds the pod needs to terminate gracefully upon probe failure. The grace period is the duration in seconds after the processes running in the pod are sent a termination signal and the time when the processes are forcibly halted with a kill signal. Set this value longer than the expected cleanup time for your process. If this value is nil, the pod's terminationGracePeriodSeconds will be used. Otherwise, this value overrides the value provided by the pod spec. Value must be non-negative integer. The value zero indicates stop immediately via the kill signal (no opportunity to shut down). This is a beta field and requires enabling ProbeTerminationGracePeriod feature gate. Minimum value is 1. spec.terminationGracePeriodSeconds is used if unset.
                                  format: int64
                                  type: integer
                                timeoutSeconds:
@@ -7925,7 +7966,7 @@ spec:
                                  - port
                                  type: object
                                terminationGracePeriodSeconds:
-                                  description: Optional duration in seconds the pod needs to terminate gracefully upon probe failure. The grace period is the duration in seconds after the processes running in the pod are sent a termination signal and the time when the processes are forcibly halted with a kill signal. Set this value longer than the expected cleanup time for your process. If this value is nil, the pod's terminationGracePeriodSeconds will be used. Otherwise, this value overrides the value provided by the pod spec. Value must be non-negative integer. The value zero indicates stop immediately via the kill signal (no opportunity to shut down). This is an alpha field and requires enabling ProbeTerminationGracePeriod feature gate.
+                                  description: Optional duration in seconds the pod needs to terminate gracefully upon probe failure. The grace period is the duration in seconds after the processes running in the pod are sent a termination signal and the time when the processes are forcibly halted with a kill signal. Set this value longer than the expected cleanup time for your process. If this value is nil, the pod's terminationGracePeriodSeconds will be used. Otherwise, this value overrides the value provided by the pod spec. Value must be non-negative integer. The value zero indicates stop immediately via the kill signal (no opportunity to shut down). This is a beta field and requires enabling ProbeTerminationGracePeriod feature gate. Minimum value is 1. spec.terminationGracePeriodSeconds is used if unset.
                                  format: int64
                                  type: integer
                                timeoutSeconds:
@@ -7956,7 +7997,7 @@ spec:
                                  type: object
                              type: object
                            securityContext:
-                              description: 'Security options the pod should run with. More info: https://kubernetes.io/docs/concepts/policy/security-context/ More info: https://kubernetes.io/docs/tasks/configure-pod-container/security-context/'
+                              description: 'SecurityContext defines the security options the container should be run with. If set, the fields of SecurityContext override the equivalent fields of PodSecurityContext. More info: https://kubernetes.io/docs/tasks/configure-pod-container/security-context/'
                              properties:
                                allowPrivilegeEscalation:
                                  description: 'AllowPrivilegeEscalation controls whether a process can gain more privileges than its parent process. This bool directly controls if the no_new_privs flag will be set on the container process. AllowPrivilegeEscalation is true always when the container is: 1) run as Privileged 2) has CAP_SYS_ADMIN'
@@ -8034,6 +8075,9 @@ spec:
                                    gmsaCredentialSpecName:
                                      description: GMSACredentialSpecName is the name of the GMSA credential spec to use.
                                      type: string
+                                    hostProcess:
+                                      description: HostProcess determines if a container should be run as a 'Host Process' container. This field is alpha-level and will only be honored by components that enable the WindowsHostProcessContainers feature flag. Setting this field without the feature flag will result in errors when validating the Pod. All of a Pod's containers must have the same effective HostProcess value (it is not allowed to have a mix of HostProcess containers and non-HostProcess containers).  In addition, if HostProcess is true then HostNetwork must also be set to true.
+                                      type: boolean
                                    runAsUserName:
                                      description: The UserName in Windows to run the entrypoint of the container process. Defaults to the user specified in image metadata if unspecified. May also be set in PodSecurityContext. If set in both SecurityContext and PodSecurityContext, the value specified in SecurityContext takes precedence.
                                      type: string
@@ -8120,7 +8164,7 @@ spec:
                                  - port
                                  type: object
                                terminationGracePeriodSeconds:
-                                  description: Optional duration in seconds the pod needs to terminate gracefully upon probe failure. The grace period is the duration in seconds after the processes running in the pod are sent a termination signal and the time when the processes are forcibly halted with a kill signal. Set this value longer than the expected cleanup time for your process. If this value is nil, the pod's terminationGracePeriodSeconds will be used. Otherwise, this value overrides the value provided by the pod spec. Value must be non-negative integer. The value zero indicates stop immediately via the kill signal (no opportunity to shut down). This is an alpha field and requires enabling ProbeTerminationGracePeriod feature gate.
+                                  description: Optional duration in seconds the pod needs to terminate gracefully upon probe failure. The grace period is the duration in seconds after the processes running in the pod are sent a termination signal and the time when the processes are forcibly halted with a kill signal. Set this value longer than the expected cleanup time for your process. If this value is nil, the pod's terminationGracePeriodSeconds will be used. Otherwise, this value overrides the value provided by the pod spec. Value must be non-negative integer. The value zero indicates stop immediately via the kill signal (no opportunity to shut down). This is a beta field and requires enabling ProbeTerminationGracePeriod feature gate. Minimum value is 1. spec.terminationGracePeriodSeconds is used if unset.
                                  format: int64
                                  type: integer
                                timeoutSeconds:
@@ -8202,6 +8246,7 @@ spec:
                          type: string
                        description: 'NodeSelector is a selector which must be true for the pod to fit on a node. Selector which must match a node''s labels for the pod to be scheduled on that node. More info: https://kubernetes.io/docs/concepts/configuration/assign-pod-node/'
                        type: object
+                        x-kubernetes-map-type: atomic
                      overhead:
                        additionalProperties:
                          anyOf:
@@ -8209,7 +8254,7 @@ spec:
                          - type: string
                          pattern: ^(\+|-)?(([0-9]+(\.[0-9]*)?)|(\.[0-9]+))(([KMGTPE]i)|[numkMGTPE]|([eE](\+|-)?(([0-9]+(\.[0-9]*)?)|(\.[0-9]+))))?$
                          x-kubernetes-int-or-string: true
-                        description: 'Overhead represents the resource overhead associated with running a pod for a given RuntimeClass. This field will be autopopulated at admission time by the RuntimeClass admission controller. If the RuntimeClass admission controller is enabled, overhead must not be set in Pod create requests. The RuntimeClass admission controller will reject Pod create requests which have the overhead already set. If RuntimeClass is configured and selected in the PodSpec, Overhead will be set to the value defined in the corresponding RuntimeClass, otherwise it will remain unset and treated as zero. More info: https://git.k8s.io/enhancements/keps/sig-node/20190226-pod-overhead.md This field is alpha-level as of Kubernetes v1.16, and is only honored by servers that enable the PodOverhead feature.'
+                        description: 'Overhead represents the resource overhead associated with running a pod for a given RuntimeClass. This field will be autopopulated at admission time by the RuntimeClass admission controller. If the RuntimeClass admission controller is enabled, overhead must not be set in Pod create requests. The RuntimeClass admission controller will reject Pod create requests which have the overhead already set. If RuntimeClass is configured and selected in the PodSpec, Overhead will be set to the value defined in the corresponding RuntimeClass, otherwise it will remain unset and treated as zero. More info: https://git.k8s.io/enhancements/keps/sig-node/688-pod-overhead/README.md This field is beta-level as of Kubernetes v1.18, and is only honored by servers that enable the PodOverhead feature.'
                        type: object
                      preemptionPolicy:
                        description: PreemptionPolicy is the Policy for preempting pods with lower priority. One of Never, PreemptLowerPriority. Defaults to PreemptLowerPriority if unset. This field is beta-level, gated by the NonPreemptingPriority feature-gate.
@@ -8222,7 +8267,7 @@ spec:
                        description: If specified, indicates the pod's priority. "system-node-critical" and "system-cluster-critical" are two special keywords which indicate the highest priorities with the former being the highest priority. Any other name must be defined by creating a PriorityClass object with that name. If not specified, the pod priority will be default or zero if there is no default.
                        type: string
                      readinessGates:
-                        description: 'If specified, all readiness gates will be evaluated for pod readiness. A pod is ready when all its containers are ready AND all conditions specified in the readiness gates have status equal to "True" More info: https://git.k8s.io/enhancements/keps/sig-network/0007-pod-ready%2B%2B.md'
+                        description: 'If specified, all readiness gates will be evaluated for pod readiness. A pod is ready when all its containers are ready AND all conditions specified in the readiness gates have status equal to "True" More info: https://git.k8s.io/enhancements/keps/sig-network/580-pod-readiness-gates'
                        items:
                          description: PodReadinessGate contains the reference to a pod condition
                          properties:
@@ -8237,7 +8282,7 @@ spec:
                        description: 'Restart policy for all containers within the pod. One of Always, OnFailure, Never. Default to Always. More info: https://kubernetes.io/docs/concepts/workloads/pods/pod-lifecycle/#restart-policy'
                        type: string
                      runtimeClassName:
-                        description: 'RuntimeClassName refers to a RuntimeClass object in the node.k8s.io group, which should be used to run this pod.  If no RuntimeClass resource matches the named class, the pod will not be run. If unset or empty, the "legacy" RuntimeClass will be used, which is an implicit class with an empty definition that uses the default runtime handler. More info: https://git.k8s.io/enhancements/keps/sig-node/runtime-class.md This is a beta feature as of Kubernetes v1.14.'
+                        description: 'RuntimeClassName refers to a RuntimeClass object in the node.k8s.io group, which should be used to run this pod.  If no RuntimeClass resource matches the named class, the pod will not be run. If unset or empty, the "legacy" RuntimeClass will be used, which is an implicit class with an empty definition that uses the default runtime handler. More info: https://git.k8s.io/enhancements/keps/sig-node/585-runtime-class This is a beta feature as of Kubernetes v1.14.'
                        type: string
                      schedulerName:
                        description: If specified, the pod will be dispatched by specified scheduler. If not specified, the pod will be dispatched by default scheduler.
@@ -8322,6 +8367,9 @@ spec:
                              gmsaCredentialSpecName:
                                description: GMSACredentialSpecName is the name of the GMSA credential spec to use.
                                type: string
+                              hostProcess:
+                                description: HostProcess determines if a container should be run as a 'Host Process' container. This field is alpha-level and will only be honored by components that enable the WindowsHostProcessContainers feature flag. Setting this field without the feature flag will result in errors when validating the Pod. All of a Pod's containers must have the same effective HostProcess value (it is not allowed to have a mix of HostProcess containers and non-HostProcess containers).  In addition, if HostProcess is true then HostNetwork must also be set to true.
+                                type: boolean
                              runAsUserName:
                                description: The UserName in Windows to run the entrypoint of the container process. Defaults to the user specified in image metadata if unspecified. May also be set in PodSecurityContext. If set in both SecurityContext and PodSecurityContext, the value specified in SecurityContext takes precedence.
                                type: string
@@ -8689,7 +8737,23 @@ spec:
                                            type: string
                                          type: array
                                        dataSource:
-                                          description: 'This field can be used to specify either: * An existing VolumeSnapshot object (snapshot.storage.k8s.io/VolumeSnapshot) * An existing PVC (PersistentVolumeClaim) * An existing custom resource that implements data population (Alpha) In order to use custom resource types that implement data population, the AnyVolumeDataSource feature gate must be enabled. If the provisioner or an external controller can support the specified data source, it will create a new volume based on the contents of the specified data source.'
+                                          description: 'This field can be used to specify either: * An existing VolumeSnapshot object (snapshot.storage.k8s.io/VolumeSnapshot) * An existing PVC (PersistentVolumeClaim) If the provisioner or an external controller can support the specified data source, it will create a new volume based on the contents of the specified data source. If the AnyVolumeDataSource feature gate is enabled, this field will always have the same contents as the DataSourceRef field.'
+                                          properties:
+                                            apiGroup:
+                                              description: APIGroup is the group for the resource being referenced. If APIGroup is not specified, the specified Kind must be in the core API group. For any other third-party types, APIGroup is required.
+                                              type: string
+                                            kind:
+                                              description: Kind is the type of resource being referenced
+                                              type: string
+                                            name:
+                                              description: Name is the name of resource being referenced
+                                              type: string
+                                          required:
+                                          - kind
+                                          - name
+                                          type: object
+                                        dataSourceRef:
+                                          description: 'Specifies the object from which to populate the volume with data, if a non-empty volume is desired. This may be any local object from a non-empty API group (non core object) or a PersistentVolumeClaim object. When this field is specified, volume binding will only succeed if the type of the specified object matches some installed volume populator or dynamic provisioner. This field will replace the functionality of the DataSource field and as such if both fields are non-empty, they must have the same value. For backwards compatibility, both fields (DataSource and DataSourceRef) will be set to the same value automatically if one of them is empty and the other is non-empty. There are two important differences between DataSource and DataSourceRef: * While DataSource only allows two specific types of objects, DataSourceRef   allows any non-core object, as well as PersistentVolumeClaim objects. * While DataSource ignores disallowed values (dropping them), DataSourceRef   preserves all values, and generates an error if a disallowed value is   specified. (Alpha) Using this field requires the AnyVolumeDataSource feature gate to be enabled.'
                                          properties:
                                            apiGroup:
                                              description: APIGroup is the group for the resource being referenced. If APIGroup is not specified, the specified Kind must be in the core API group. For any other third-party types, APIGroup is required.
@@ -287,7 +287,7 @@ spec:
                                          type: object
                                      type: object
                                    namespaceSelector:
-                                      description: A label query over the set of namespaces that the term applies to. The term is applied to the union of the namespaces selected by this field and the ones listed in the namespaces field. null selector and null or empty namespaces list means "this pod's namespace". An empty selector ({}) matches all namespaces. This field is alpha-level and is only honored when PodAffinityNamespaceSelector feature is enabled.
+                                      description: A label query over the set of namespaces that the term applies to. The term is applied to the union of the namespaces selected by this field and the ones listed in the namespaces field. null selector and null or empty namespaces list means "this pod's namespace". An empty selector ({}) matches all namespaces. This field is beta-level and is only honored when PodAffinityNamespaceSelector feature is enabled.
                                      properties:
                                        matchExpressions:
                                          description: matchExpressions is a list of label selector requirements. The requirements are ANDed.
@@ -372,7 +372,7 @@ spec:
                                      type: object
                                  type: object
                                namespaceSelector:
-                                  description: A label query over the set of namespaces that the term applies to. The term is applied to the union of the namespaces selected by this field and the ones listed in the namespaces field. null selector and null or empty namespaces list means "this pod's namespace". An empty selector ({}) matches all namespaces. This field is alpha-level and is only honored when PodAffinityNamespaceSelector feature is enabled.
+                                  description: A label query over the set of namespaces that the term applies to. The term is applied to the union of the namespaces selected by this field and the ones listed in the namespaces field. null selector and null or empty namespaces list means "this pod's namespace". An empty selector ({}) matches all namespaces. This field is beta-level and is only honored when PodAffinityNamespaceSelector feature is enabled.
                                  properties:
                                    matchExpressions:
                                      description: matchExpressions is a list of label selector requirements. The requirements are ANDed.
@@ -456,7 +456,7 @@ spec:
                                          type: object
                                      type: object
                                    namespaceSelector:
-                                      description: A label query over the set of namespaces that the term applies to. The term is applied to the union of the namespaces selected by this field and the ones listed in the namespaces field. null selector and null or empty namespaces list means "this pod's namespace". An empty selector ({}) matches all namespaces. This field is alpha-level and is only honored when PodAffinityNamespaceSelector feature is enabled.
+                                      description: A label query over the set of namespaces that the term applies to. The term is applied to the union of the namespaces selected by this field and the ones listed in the namespaces field. null selector and null or empty namespaces list means "this pod's namespace". An empty selector ({}) matches all namespaces. This field is beta-level and is only honored when PodAffinityNamespaceSelector feature is enabled.
                                      properties:
                                        matchExpressions:
                                          description: matchExpressions is a list of label selector requirements. The requirements are ANDed.
@@ -541,7 +541,7 @@ spec:
                                      type: object
                                  type: object
                                namespaceSelector:
-                                  description: A label query over the set of namespaces that the term applies to. The term is applied to the union of the namespaces selected by this field and the ones listed in the namespaces field. null selector and null or empty namespaces list means "this pod's namespace". An empty selector ({}) matches all namespaces. This field is alpha-level and is only honored when PodAffinityNamespaceSelector feature is enabled.
+                                  description: A label query over the set of namespaces that the term applies to. The term is applied to the union of the namespaces selected by this field and the ones listed in the namespaces field. null selector and null or empty namespaces list means "this pod's namespace". An empty selector ({}) matches all namespaces. This field is beta-level and is only honored when PodAffinityNamespaceSelector feature is enabled.
                                  properties:
                                    matchExpressions:
                                      description: matchExpressions is a list of label selector requirements. The requirements are ANDed.
@@ -593,12 +593,12 @@ spec:
                      description: A single application container that you want to run within a pod.
                      properties:
                        args:
-                          description: 'Arguments to the entrypoint. The docker image''s CMD is used if this is not provided. Variable references $(VAR_NAME) are expanded using the container''s environment. If a variable cannot be resolved, the reference in the input string will be unchanged. The $(VAR_NAME) syntax can be escaped with a double $$, ie: $$(VAR_NAME). Escaped references will never be expanded, regardless of whether the variable exists or not. Cannot be updated. More info: https://kubernetes.io/docs/tasks/inject-data-application/define-command-argument-container/#running-a-command-in-a-shell'
+                          description: 'Arguments to the entrypoint. The docker image''s CMD is used if this is not provided. Variable references $(VAR_NAME) are expanded using the container''s environment. If a variable cannot be resolved, the reference in the input string will be unchanged. Double $$ are reduced to a single $, which allows for escaping the $(VAR_NAME) syntax: i.e. "$$(VAR_NAME)" will produce the string literal "$(VAR_NAME)". Escaped references will never be expanded, regardless of whether the variable exists or not. Cannot be updated. More info: https://kubernetes.io/docs/tasks/inject-data-application/define-command-argument-container/#running-a-command-in-a-shell'
                          items:
                            type: string
                          type: array
                        command:
-                          description: 'Entrypoint array. Not executed within a shell. The docker image''s ENTRYPOINT is used if this is not provided. Variable references $(VAR_NAME) are expanded using the container''s environment. If a variable cannot be resolved, the reference in the input string will be unchanged. The $(VAR_NAME) syntax can be escaped with a double $$, ie: $$(VAR_NAME). Escaped references will never be expanded, regardless of whether the variable exists or not. Cannot be updated. More info: https://kubernetes.io/docs/tasks/inject-data-application/define-command-argument-container/#running-a-command-in-a-shell'
+                          description: 'Entrypoint array. Not executed within a shell. The docker image''s ENTRYPOINT is used if this is not provided. Variable references $(VAR_NAME) are expanded using the container''s environment. If a variable cannot be resolved, the reference in the input string will be unchanged. Double $$ are reduced to a single $, which allows for escaping the $(VAR_NAME) syntax: i.e. "$$(VAR_NAME)" will produce the string literal "$(VAR_NAME)". Escaped references will never be expanded, regardless of whether the variable exists or not. Cannot be updated. More info: https://kubernetes.io/docs/tasks/inject-data-application/define-command-argument-container/#running-a-command-in-a-shell'
                          items:
                            type: string
                          type: array
@@ -611,7 +611,7 @@ spec:
                                description: Name of the environment variable. Must be a C_IDENTIFIER.
                                type: string
                              value:
-                                description: 'Variable references $(VAR_NAME) are expanded using the previous defined environment variables in the container and any service environment variables. If a variable cannot be resolved, the reference in the input string will be unchanged. The $(VAR_NAME) syntax can be escaped with a double $$, ie: $$(VAR_NAME). Escaped references will never be expanded, regardless of whether the variable exists or not. Defaults to "".'
+                                description: 'Variable references $(VAR_NAME) are expanded using the previously defined environment variables in the container and any service environment variables. If a variable cannot be resolved, the reference in the input string will be unchanged. Double $$ are reduced to a single $, which allows for escaping the $(VAR_NAME) syntax: i.e. "$$(VAR_NAME)" will produce the string literal "$(VAR_NAME)". Escaped references will never be expanded, regardless of whether the variable exists or not. Defaults to "".'
                                type: string
                              valueFrom:
                                description: Source for the environment variable's value. Cannot be used if value is not empty.
@@ -933,7 +933,7 @@ spec:
                              - port
                              type: object
                            terminationGracePeriodSeconds:
-                              description: Optional duration in seconds the pod needs to terminate gracefully upon probe failure. The grace period is the duration in seconds after the processes running in the pod are sent a termination signal and the time when the processes are forcibly halted with a kill signal. Set this value longer than the expected cleanup time for your process. If this value is nil, the pod's terminationGracePeriodSeconds will be used. Otherwise, this value overrides the value provided by the pod spec. Value must be non-negative integer. The value zero indicates stop immediately via the kill signal (no opportunity to shut down). This is an alpha field and requires enabling ProbeTerminationGracePeriod feature gate.
+                              description: Optional duration in seconds the pod needs to terminate gracefully upon probe failure. The grace period is the duration in seconds after the processes running in the pod are sent a termination signal and the time when the processes are forcibly halted with a kill signal. Set this value longer than the expected cleanup time for your process. If this value is nil, the pod's terminationGracePeriodSeconds will be used. Otherwise, this value overrides the value provided by the pod spec. Value must be non-negative integer. The value zero indicates stop immediately via the kill signal (no opportunity to shut down). This is a beta field and requires enabling ProbeTerminationGracePeriod feature gate. Minimum value is 1. spec.terminationGracePeriodSeconds is used if unset.
                              format: int64
                              type: integer
                            timeoutSeconds:
@@ -1056,7 +1056,7 @@ spec:
                              - port
                              type: object
                            terminationGracePeriodSeconds:
-                              description: Optional duration in seconds the pod needs to terminate gracefully upon probe failure. The grace period is the duration in seconds after the processes running in the pod are sent a termination signal and the time when the processes are forcibly halted with a kill signal. Set this value longer than the expected cleanup time for your process. If this value is nil, the pod's terminationGracePeriodSeconds will be used. Otherwise, this value overrides the value provided by the pod spec. Value must be non-negative integer. The value zero indicates stop immediately via the kill signal (no opportunity to shut down). This is an alpha field and requires enabling ProbeTerminationGracePeriod feature gate.
+                              description: Optional duration in seconds the pod needs to terminate gracefully upon probe failure. The grace period is the duration in seconds after the processes running in the pod are sent a termination signal and the time when the processes are forcibly halted with a kill signal. Set this value longer than the expected cleanup time for your process. If this value is nil, the pod's terminationGracePeriodSeconds will be used. Otherwise, this value overrides the value provided by the pod spec. Value must be non-negative integer. The value zero indicates stop immediately via the kill signal (no opportunity to shut down). This is a beta field and requires enabling ProbeTerminationGracePeriod feature gate. Minimum value is 1. spec.terminationGracePeriodSeconds is used if unset.
                              format: int64
                              type: integer
                            timeoutSeconds:
@@ -1087,7 +1087,7 @@ spec:
                              type: object
                          type: object
                        securityContext:
-                          description: 'Security options the pod should run with. More info: https://kubernetes.io/docs/concepts/policy/security-context/ More info: https://kubernetes.io/docs/tasks/configure-pod-container/security-context/'
+                          description: 'SecurityContext defines the security options the container should be run with. If set, the fields of SecurityContext override the equivalent fields of PodSecurityContext. More info: https://kubernetes.io/docs/tasks/configure-pod-container/security-context/'
                          properties:
                            allowPrivilegeEscalation:
                              description: 'AllowPrivilegeEscalation controls whether a process can gain more privileges than its parent process. This bool directly controls if the no_new_privs flag will be set on the container process. AllowPrivilegeEscalation is true always when the container is: 1) run as Privileged 2) has CAP_SYS_ADMIN'
@@ -1165,6 +1165,9 @@ spec:
                                gmsaCredentialSpecName:
                                  description: GMSACredentialSpecName is the name of the GMSA credential spec to use.
                                  type: string
+                                hostProcess:
+                                  description: HostProcess determines if a container should be run as a 'Host Process' container. This field is alpha-level and will only be honored by components that enable the WindowsHostProcessContainers feature flag. Setting this field without the feature flag will result in errors when validating the Pod. All of a Pod's containers must have the same effective HostProcess value (it is not allowed to have a mix of HostProcess containers and non-HostProcess containers).  In addition, if HostProcess is true then HostNetwork must also be set to true.
+                                  type: boolean
                                runAsUserName:
                                  description: The UserName in Windows to run the entrypoint of the container process. Defaults to the user specified in image metadata if unspecified. May also be set in PodSecurityContext. If set in both SecurityContext and PodSecurityContext, the value specified in SecurityContext takes precedence.
                                  type: string
@@ -1251,7 +1254,7 @@ spec:
                              - port
                              type: object
                            terminationGracePeriodSeconds:
-                              description: Optional duration in seconds the pod needs to terminate gracefully upon probe failure. The grace period is the duration in seconds after the processes running in the pod are sent a termination signal and the time when the processes are forcibly halted with a kill signal. Set this value longer than the expected cleanup time for your process. If this value is nil, the pod's terminationGracePeriodSeconds will be used. Otherwise, this value overrides the value provided by the pod spec. Value must be non-negative integer. The value zero indicates stop immediately via the kill signal (no opportunity to shut down). This is an alpha field and requires enabling ProbeTerminationGracePeriod feature gate.
+                              description: Optional duration in seconds the pod needs to terminate gracefully upon probe failure. The grace period is the duration in seconds after the processes running in the pod are sent a termination signal and the time when the processes are forcibly halted with a kill signal. Set this value longer than the expected cleanup time for your process. If this value is nil, the pod's terminationGracePeriodSeconds will be used. Otherwise, this value overrides the value provided by the pod spec. Value must be non-negative integer. The value zero indicates stop immediately via the kill signal (no opportunity to shut down). This is a beta field and requires enabling ProbeTerminationGracePeriod feature gate. Minimum value is 1. spec.terminationGracePeriodSeconds is used if unset.
                              format: int64
                              type: integer
                            timeoutSeconds:
@@ -1363,12 +1366,12 @@ spec:
                      description: An EphemeralContainer is a container that may be added temporarily to an existing pod for user-initiated activities such as debugging. Ephemeral containers have no resource or scheduling guarantees, and they will not be restarted when they exit or when a pod is removed or restarted. If an ephemeral container causes a pod to exceed its resource allocation, the pod may be evicted. Ephemeral containers may not be added by directly updating the pod spec. They must be added via the pod's ephemeralcontainers subresource, and they will appear in the pod spec once added. This is an alpha feature enabled by the EphemeralContainers feature flag.
                      properties:
                        args:
-                          description: 'Arguments to the entrypoint. The docker image''s CMD is used if this is not provided. Variable references $(VAR_NAME) are expanded using the container''s environment. If a variable cannot be resolved, the reference in the input string will be unchanged. The $(VAR_NAME) syntax can be escaped with a double $$, ie: $$(VAR_NAME). Escaped references will never be expanded, regardless of whether the variable exists or not. Cannot be updated. More info: https://kubernetes.io/docs/tasks/inject-data-application/define-command-argument-container/#running-a-command-in-a-shell'
+                          description: 'Arguments to the entrypoint. The docker image''s CMD is used if this is not provided. Variable references $(VAR_NAME) are expanded using the container''s environment. If a variable cannot be resolved, the reference in the input string will be unchanged. Double $$ are reduced to a single $, which allows for escaping the $(VAR_NAME) syntax: i.e. "$$(VAR_NAME)" will produce the string literal "$(VAR_NAME)". Escaped references will never be expanded, regardless of whether the variable exists or not. Cannot be updated. More info: https://kubernetes.io/docs/tasks/inject-data-application/define-command-argument-container/#running-a-command-in-a-shell'
                          items:
                            type: string
                          type: array
                        command:
-                          description: 'Entrypoint array. Not executed within a shell. The docker image''s ENTRYPOINT is used if this is not provided. Variable references $(VAR_NAME) are expanded using the container''s environment. If a variable cannot be resolved, the reference in the input string will be unchanged. The $(VAR_NAME) syntax can be escaped with a double $$, ie: $$(VAR_NAME). Escaped references will never be expanded, regardless of whether the variable exists or not. Cannot be updated. More info: https://kubernetes.io/docs/tasks/inject-data-application/define-command-argument-container/#running-a-command-in-a-shell'
+                          description: 'Entrypoint array. Not executed within a shell. The docker image''s ENTRYPOINT is used if this is not provided. Variable references $(VAR_NAME) are expanded using the container''s environment. If a variable cannot be resolved, the reference in the input string will be unchanged. Double $$ are reduced to a single $, which allows for escaping the $(VAR_NAME) syntax: i.e. "$$(VAR_NAME)" will produce the string literal "$(VAR_NAME)". Escaped references will never be expanded, regardless of whether the variable exists or not. Cannot be updated. More info: https://kubernetes.io/docs/tasks/inject-data-application/define-command-argument-container/#running-a-command-in-a-shell'
                          items:
                            type: string
                          type: array
@@ -1381,7 +1384,7 @@ spec:
                                description: Name of the environment variable. Must be a C_IDENTIFIER.
                                type: string
                              value:
-                                description: 'Variable references $(VAR_NAME) are expanded using the previous defined environment variables in the container and any service environment variables. If a variable cannot be resolved, the reference in the input string will be unchanged. The $(VAR_NAME) syntax can be escaped with a double $$, ie: $$(VAR_NAME). Escaped references will never be expanded, regardless of whether the variable exists or not. Defaults to "".'
+                                description: 'Variable references $(VAR_NAME) are expanded using the previously defined environment variables in the container and any service environment variables. If a variable cannot be resolved, the reference in the input string will be unchanged. Double $$ are reduced to a single $, which allows for escaping the $(VAR_NAME) syntax: i.e. "$$(VAR_NAME)" will produce the string literal "$(VAR_NAME)". Escaped references will never be expanded, regardless of whether the variable exists or not. Defaults to "".'
                                type: string
                              valueFrom:
                                description: Source for the environment variable's value. Cannot be used if value is not empty.
@@ -1703,7 +1706,7 @@ spec:
                              - port
                              type: object
                            terminationGracePeriodSeconds:
-                              description: Optional duration in seconds the pod needs to terminate gracefully upon probe failure. The grace period is the duration in seconds after the processes running in the pod are sent a termination signal and the time when the processes are forcibly halted with a kill signal. Set this value longer than the expected cleanup time for your process. If this value is nil, the pod's terminationGracePeriodSeconds will be used. Otherwise, this value overrides the value provided by the pod spec. Value must be non-negative integer. The value zero indicates stop immediately via the kill signal (no opportunity to shut down). This is an alpha field and requires enabling ProbeTerminationGracePeriod feature gate.
+                              description: Optional duration in seconds the pod needs to terminate gracefully upon probe failure. The grace period is the duration in seconds after the processes running in the pod are sent a termination signal and the time when the processes are forcibly halted with a kill signal. Set this value longer than the expected cleanup time for your process. If this value is nil, the pod's terminationGracePeriodSeconds will be used. Otherwise, this value overrides the value provided by the pod spec. Value must be non-negative integer. The value zero indicates stop immediately via the kill signal (no opportunity to shut down). This is a beta field and requires enabling ProbeTerminationGracePeriod feature gate. Minimum value is 1. spec.terminationGracePeriodSeconds is used if unset.
                              format: int64
                              type: integer
                            timeoutSeconds:
@@ -1822,7 +1825,7 @@ spec:
                              - port
                              type: object
                            terminationGracePeriodSeconds:
-                              description: Optional duration in seconds the pod needs to terminate gracefully upon probe failure. The grace period is the duration in seconds after the processes running in the pod are sent a termination signal and the time when the processes are forcibly halted with a kill signal. Set this value longer than the expected cleanup time for your process. If this value is nil, the pod's terminationGracePeriodSeconds will be used. Otherwise, this value overrides the value provided by the pod spec. Value must be non-negative integer. The value zero indicates stop immediately via the kill signal (no opportunity to shut down). This is an alpha field and requires enabling ProbeTerminationGracePeriod feature gate.
+                              description: Optional duration in seconds the pod needs to terminate gracefully upon probe failure. The grace period is the duration in seconds after the processes running in the pod are sent a termination signal and the time when the processes are forcibly halted with a kill signal. Set this value longer than the expected cleanup time for your process. If this value is nil, the pod's terminationGracePeriodSeconds will be used. Otherwise, this value overrides the value provided by the pod spec. Value must be non-negative integer. The value zero indicates stop immediately via the kill signal (no opportunity to shut down). This is a beta field and requires enabling ProbeTerminationGracePeriod feature gate. Minimum value is 1. spec.terminationGracePeriodSeconds is used if unset.
                              format: int64
                              type: integer
                            timeoutSeconds:
@@ -1853,7 +1856,7 @@ spec:
                              type: object
                          type: object
                        securityContext:
-                          description: SecurityContext is not allowed for ephemeral containers.
+                          description: 'Optional: SecurityContext defines the security options the ephemeral container should be run with. If set, the fields of SecurityContext override the equivalent fields of PodSecurityContext.'
                          properties:
                            allowPrivilegeEscalation:
                              description: 'AllowPrivilegeEscalation controls whether a process can gain more privileges than its parent process. This bool directly controls if the no_new_privs flag will be set on the container process. AllowPrivilegeEscalation is true always when the container is: 1) run as Privileged 2) has CAP_SYS_ADMIN'
@@ -1931,6 +1934,9 @@ spec:
                                gmsaCredentialSpecName:
                                  description: GMSACredentialSpecName is the name of the GMSA credential spec to use.
                                  type: string
+                                hostProcess:
+                                  description: HostProcess determines if a container should be run as a 'Host Process' container. This field is alpha-level and will only be honored by components that enable the WindowsHostProcessContainers feature flag. Setting this field without the feature flag will result in errors when validating the Pod. All of a Pod's containers must have the same effective HostProcess value (it is not allowed to have a mix of HostProcess containers and non-HostProcess containers).  In addition, if HostProcess is true then HostNetwork must also be set to true.
+                                  type: boolean
                                runAsUserName:
                                  description: The UserName in Windows to run the entrypoint of the container process. Defaults to the user specified in image metadata if unspecified. May also be set in PodSecurityContext. If set in both SecurityContext and PodSecurityContext, the value specified in SecurityContext takes precedence.
                                  type: string
@@ -2017,7 +2023,7 @@ spec:
                              - port
                              type: object
                            terminationGracePeriodSeconds:
-                              description: Optional duration in seconds the pod needs to terminate gracefully upon probe failure. The grace period is the duration in seconds after the processes running in the pod are sent a termination signal and the time when the processes are forcibly halted with a kill signal. Set this value longer than the expected cleanup time for your process. If this value is nil, the pod's terminationGracePeriodSeconds will be used. Otherwise, this value overrides the value provided by the pod spec. Value must be non-negative integer. The value zero indicates stop immediately via the kill signal (no opportunity to shut down). This is an alpha field and requires enabling ProbeTerminationGracePeriod feature gate.
+                              description: Optional duration in seconds the pod needs to terminate gracefully upon probe failure. The grace period is the duration in seconds after the processes running in the pod are sent a termination signal and the time when the processes are forcibly halted with a kill signal. Set this value longer than the expected cleanup time for your process. If this value is nil, the pod's terminationGracePeriodSeconds will be used. Otherwise, this value overrides the value provided by the pod spec. Value must be non-negative integer. The value zero indicates stop immediately via the kill signal (no opportunity to shut down). This is a beta field and requires enabling ProbeTerminationGracePeriod feature gate. Minimum value is 1. spec.terminationGracePeriodSeconds is used if unset.
                              format: int64
                              type: integer
                            timeoutSeconds:
@@ -2137,12 +2143,12 @@ spec:
                      description: A single application container that you want to run within a pod.
                      properties:
                        args:
-                          description: 'Arguments to the entrypoint. The docker image''s CMD is used if this is not provided. Variable references $(VAR_NAME) are expanded using the container''s environment. If a variable cannot be resolved, the reference in the input string will be unchanged. The $(VAR_NAME) syntax can be escaped with a double $$, ie: $$(VAR_NAME). Escaped references will never be expanded, regardless of whether the variable exists or not. Cannot be updated. More info: https://kubernetes.io/docs/tasks/inject-data-application/define-command-argument-container/#running-a-command-in-a-shell'
+                          description: 'Arguments to the entrypoint. The docker image''s CMD is used if this is not provided. Variable references $(VAR_NAME) are expanded using the container''s environment. If a variable cannot be resolved, the reference in the input string will be unchanged. Double $$ are reduced to a single $, which allows for escaping the $(VAR_NAME) syntax: i.e. "$$(VAR_NAME)" will produce the string literal "$(VAR_NAME)". Escaped references will never be expanded, regardless of whether the variable exists or not. Cannot be updated. More info: https://kubernetes.io/docs/tasks/inject-data-application/define-command-argument-container/#running-a-command-in-a-shell'
                          items:
                            type: string
                          type: array
                        command:
-                          description: 'Entrypoint array. Not executed within a shell. The docker image''s ENTRYPOINT is used if this is not provided. Variable references $(VAR_NAME) are expanded using the container''s environment. If a variable cannot be resolved, the reference in the input string will be unchanged. The $(VAR_NAME) syntax can be escaped with a double $$, ie: $$(VAR_NAME). Escaped references will never be expanded, regardless of whether the variable exists or not. Cannot be updated. More info: https://kubernetes.io/docs/tasks/inject-data-application/define-command-argument-container/#running-a-command-in-a-shell'
+                          description: 'Entrypoint array. Not executed within a shell. The docker image''s ENTRYPOINT is used if this is not provided. Variable references $(VAR_NAME) are expanded using the container''s environment. If a variable cannot be resolved, the reference in the input string will be unchanged. Double $$ are reduced to a single $, which allows for escaping the $(VAR_NAME) syntax: i.e. "$$(VAR_NAME)" will produce the string literal "$(VAR_NAME)". Escaped references will never be expanded, regardless of whether the variable exists or not. Cannot be updated. More info: https://kubernetes.io/docs/tasks/inject-data-application/define-command-argument-container/#running-a-command-in-a-shell'
                          items:
                            type: string
                          type: array
@@ -2155,7 +2161,7 @@ spec:
                                description: Name of the environment variable. Must be a C_IDENTIFIER.
                                type: string
                              value:
-                                description: 'Variable references $(VAR_NAME) are expanded using the previous defined environment variables in the container and any service environment variables. If a variable cannot be resolved, the reference in the input string will be unchanged. The $(VAR_NAME) syntax can be escaped with a double $$, ie: $$(VAR_NAME). Escaped references will never be expanded, regardless of whether the variable exists or not. Defaults to "".'
+                                description: 'Variable references $(VAR_NAME) are expanded using the previously defined environment variables in the container and any service environment variables. If a variable cannot be resolved, the reference in the input string will be unchanged. Double $$ are reduced to a single $, which allows for escaping the $(VAR_NAME) syntax: i.e. "$$(VAR_NAME)" will produce the string literal "$(VAR_NAME)". Escaped references will never be expanded, regardless of whether the variable exists or not. Defaults to "".'
                                type: string
                              valueFrom:
                                description: Source for the environment variable's value. Cannot be used if value is not empty.
@@ -2477,7 +2483,7 @@ spec:
                              - port
                              type: object
                            terminationGracePeriodSeconds:
-                              description: Optional duration in seconds the pod needs to terminate gracefully upon probe failure. The grace period is the duration in seconds after the processes running in the pod are sent a termination signal and the time when the processes are forcibly halted with a kill signal. Set this value longer than the expected cleanup time for your process. If this value is nil, the pod's terminationGracePeriodSeconds will be used. Otherwise, this value overrides the value provided by the pod spec. Value must be non-negative integer. The value zero indicates stop immediately via the kill signal (no opportunity to shut down). This is an alpha field and requires enabling ProbeTerminationGracePeriod feature gate.
+                              description: Optional duration in seconds the pod needs to terminate gracefully upon probe failure. The grace period is the duration in seconds after the processes running in the pod are sent a termination signal and the time when the processes are forcibly halted with a kill signal. Set this value longer than the expected cleanup time for your process. If this value is nil, the pod's terminationGracePeriodSeconds will be used. Otherwise, this value overrides the value provided by the pod spec. Value must be non-negative integer. The value zero indicates stop immediately via the kill signal (no opportunity to shut down). This is a beta field and requires enabling ProbeTerminationGracePeriod feature gate. Minimum value is 1. spec.terminationGracePeriodSeconds is used if unset.
                              format: int64
                              type: integer
                            timeoutSeconds:
@@ -2600,7 +2606,7 @@ spec:
                              - port
                              type: object
                            terminationGracePeriodSeconds:
-                              description: Optional duration in seconds the pod needs to terminate gracefully upon probe failure. The grace period is the duration in seconds after the processes running in the pod are sent a termination signal and the time when the processes are forcibly halted with a kill signal. Set this value longer than the expected cleanup time for your process. If this value is nil, the pod's terminationGracePeriodSeconds will be used. Otherwise, this value overrides the value provided by the pod spec. Value must be non-negative integer. The value zero indicates stop immediately via the kill signal (no opportunity to shut down). This is an alpha field and requires enabling ProbeTerminationGracePeriod feature gate.
+                              description: Optional duration in seconds the pod needs to terminate gracefully upon probe failure. The grace period is the duration in seconds after the processes running in the pod are sent a termination signal and the time when the processes are forcibly halted with a kill signal. Set this value longer than the expected cleanup time for your process. If this value is nil, the pod's terminationGracePeriodSeconds will be used. Otherwise, this value overrides the value provided by the pod spec. Value must be non-negative integer. The value zero indicates stop immediately via the kill signal (no opportunity to shut down). This is a beta field and requires enabling ProbeTerminationGracePeriod feature gate. Minimum value is 1. spec.terminationGracePeriodSeconds is used if unset.
                              format: int64
                              type: integer
                            timeoutSeconds:
@@ -2631,7 +2637,7 @@ spec:
                              type: object
                          type: object
                        securityContext:
-                          description: 'Security options the pod should run with. More info: https://kubernetes.io/docs/concepts/policy/security-context/ More info: https://kubernetes.io/docs/tasks/configure-pod-container/security-context/'
+                          description: 'SecurityContext defines the security options the container should be run with. If set, the fields of SecurityContext override the equivalent fields of PodSecurityContext. More info: https://kubernetes.io/docs/tasks/configure-pod-container/security-context/'
                          properties:
                            allowPrivilegeEscalation:
                              description: 'AllowPrivilegeEscalation controls whether a process can gain more privileges than its parent process. This bool directly controls if the no_new_privs flag will be set on the container process. AllowPrivilegeEscalation is true always when the container is: 1) run as Privileged 2) has CAP_SYS_ADMIN'
@@ -2709,6 +2715,9 @@ spec:
                                gmsaCredentialSpecName:
                                  description: GMSACredentialSpecName is the name of the GMSA credential spec to use.
                                  type: string
+                                hostProcess:
+                                  description: HostProcess determines if a container should be run as a 'Host Process' container. This field is alpha-level and will only be honored by components that enable the WindowsHostProcessContainers feature flag. Setting this field without the feature flag will result in errors when validating the Pod. All of a Pod's containers must have the same effective HostProcess value (it is not allowed to have a mix of HostProcess containers and non-HostProcess containers).  In addition, if HostProcess is true then HostNetwork must also be set to true.
+                                  type: boolean
                                runAsUserName:
                                  description: The UserName in Windows to run the entrypoint of the container process. Defaults to the user specified in image metadata if unspecified. May also be set in PodSecurityContext. If set in both SecurityContext and PodSecurityContext, the value specified in SecurityContext takes precedence.
                                  type: string
@@ -2795,7 +2804,7 @@ spec:
                              - port
                              type: object
                            terminationGracePeriodSeconds:
-                              description: Optional duration in seconds the pod needs to terminate gracefully upon probe failure. The grace period is the duration in seconds after the processes running in the pod are sent a termination signal and the time when the processes are forcibly halted with a kill signal. Set this value longer than the expected cleanup time for your process. If this value is nil, the pod's terminationGracePeriodSeconds will be used. Otherwise, this value overrides the value provided by the pod spec. Value must be non-negative integer. The value zero indicates stop immediately via the kill signal (no opportunity to shut down). This is an alpha field and requires enabling ProbeTerminationGracePeriod feature gate.
+                              description: Optional duration in seconds the pod needs to terminate gracefully upon probe failure. The grace period is the duration in seconds after the processes running in the pod are sent a termination signal and the time when the processes are forcibly halted with a kill signal. Set this value longer than the expected cleanup time for your process. If this value is nil, the pod's terminationGracePeriodSeconds will be used. Otherwise, this value overrides the value provided by the pod spec. Value must be non-negative integer. The value zero indicates stop immediately via the kill signal (no opportunity to shut down). This is a beta field and requires enabling ProbeTerminationGracePeriod feature gate. Minimum value is 1. spec.terminationGracePeriodSeconds is used if unset.
                              format: int64
                              type: integer
                            timeoutSeconds:
@@ -2877,6 +2886,7 @@ spec:
                      type: string
                    description: 'NodeSelector is a selector which must be true for the pod to fit on a node. Selector which must match a node''s labels for the pod to be scheduled on that node. More info: https://kubernetes.io/docs/concepts/configuration/assign-pod-node/'
                    type: object
+                    x-kubernetes-map-type: atomic
                  overhead:
                    additionalProperties:
                      anyOf:
@@ -2884,7 +2894,7 @@ spec:
                      - type: string
                      pattern: ^(\+|-)?(([0-9]+(\.[0-9]*)?)|(\.[0-9]+))(([KMGTPE]i)|[numkMGTPE]|([eE](\+|-)?(([0-9]+(\.[0-9]*)?)|(\.[0-9]+))))?$
                      x-kubernetes-int-or-string: true
-                    description: 'Overhead represents the resource overhead associated with running a pod for a given RuntimeClass. This field will be autopopulated at admission time by the RuntimeClass admission controller. If the RuntimeClass admission controller is enabled, overhead must not be set in Pod create requests. The RuntimeClass admission controller will reject Pod create requests which have the overhead already set. If RuntimeClass is configured and selected in the PodSpec, Overhead will be set to the value defined in the corresponding RuntimeClass, otherwise it will remain unset and treated as zero. More info: https://git.k8s.io/enhancements/keps/sig-node/20190226-pod-overhead.md This field is alpha-level as of Kubernetes v1.16, and is only honored by servers that enable the PodOverhead feature.'
+                    description: 'Overhead represents the resource overhead associated with running a pod for a given RuntimeClass. This field will be autopopulated at admission time by the RuntimeClass admission controller. If the RuntimeClass admission controller is enabled, overhead must not be set in Pod create requests. The RuntimeClass admission controller will reject Pod create requests which have the overhead already set. If RuntimeClass is configured and selected in the PodSpec, Overhead will be set to the value defined in the corresponding RuntimeClass, otherwise it will remain unset and treated as zero. More info: https://git.k8s.io/enhancements/keps/sig-node/688-pod-overhead/README.md This field is beta-level as of Kubernetes v1.18, and is only honored by servers that enable the PodOverhead feature.'
                    type: object
                  preemptionPolicy:
                    description: PreemptionPolicy is the Policy for preempting pods with lower priority. One of Never, PreemptLowerPriority. Defaults to PreemptLowerPriority if unset. This field is beta-level, gated by the NonPreemptingPriority feature-gate.
@@ -2897,7 +2907,7 @@ spec:
                    description: If specified, indicates the pod's priority. "system-node-critical" and "system-cluster-critical" are two special keywords which indicate the highest priorities with the former being the highest priority. Any other name must be defined by creating a PriorityClass object with that name. If not specified, the pod priority will be default or zero if there is no default.
                    type: string
                  readinessGates:
-                    description: 'If specified, all readiness gates will be evaluated for pod readiness. A pod is ready when all its containers are ready AND all conditions specified in the readiness gates have status equal to "True" More info: https://git.k8s.io/enhancements/keps/sig-network/0007-pod-ready%2B%2B.md'
+                    description: 'If specified, all readiness gates will be evaluated for pod readiness. A pod is ready when all its containers are ready AND all conditions specified in the readiness gates have status equal to "True" More info: https://git.k8s.io/enhancements/keps/sig-network/580-pod-readiness-gates'
                    items:
                      description: PodReadinessGate contains the reference to a pod condition
                      properties:
@@ -2912,7 +2922,7 @@ spec:
                    description: 'Restart policy for all containers within the pod. One of Always, OnFailure, Never. Default to Always. More info: https://kubernetes.io/docs/concepts/workloads/pods/pod-lifecycle/#restart-policy'
                    type: string
                  runtimeClassName:
-                    description: 'RuntimeClassName refers to a RuntimeClass object in the node.k8s.io group, which should be used to run this pod.  If no RuntimeClass resource matches the named class, the pod will not be run. If unset or empty, the "legacy" RuntimeClass will be used, which is an implicit class with an empty definition that uses the default runtime handler. More info: https://git.k8s.io/enhancements/keps/sig-node/runtime-class.md This is a beta feature as of Kubernetes v1.14.'
+                    description: 'RuntimeClassName refers to a RuntimeClass object in the node.k8s.io group, which should be used to run this pod.  If no RuntimeClass resource matches the named class, the pod will not be run. If unset or empty, the "legacy" RuntimeClass will be used, which is an implicit class with an empty definition that uses the default runtime handler. More info: https://git.k8s.io/enhancements/keps/sig-node/585-runtime-class This is a beta feature as of Kubernetes v1.14.'
                    type: string
                  schedulerName:
                    description: If specified, the pod will be dispatched by specified scheduler. If not specified, the pod will be dispatched by default scheduler.
@@ -2997,6 +3007,9 @@ spec:
                          gmsaCredentialSpecName:
                            description: GMSACredentialSpecName is the name of the GMSA credential spec to use.
                            type: string
+                          hostProcess:
+                            description: HostProcess determines if a container should be run as a 'Host Process' container. This field is alpha-level and will only be honored by components that enable the WindowsHostProcessContainers feature flag. Setting this field without the feature flag will result in errors when validating the Pod. All of a Pod's containers must have the same effective HostProcess value (it is not allowed to have a mix of HostProcess containers and non-HostProcess containers).  In addition, if HostProcess is true then HostNetwork must also be set to true.
+                            type: boolean
                          runAsUserName:
                            description: The UserName in Windows to run the entrypoint of the container process. Defaults to the user specified in image metadata if unspecified. May also be set in PodSecurityContext. If set in both SecurityContext and PodSecurityContext, the value specified in SecurityContext takes precedence.
                            type: string
@@ -3364,7 +3377,23 @@ spec:
                                        type: string
                                      type: array
                                    dataSource:
-                                      description: 'This field can be used to specify either: * An existing VolumeSnapshot object (snapshot.storage.k8s.io/VolumeSnapshot) * An existing PVC (PersistentVolumeClaim) * An existing custom resource that implements data population (Alpha) In order to use custom resource types that implement data population, the AnyVolumeDataSource feature gate must be enabled. If the provisioner or an external controller can support the specified data source, it will create a new volume based on the contents of the specified data source.'
+                                      description: 'This field can be used to specify either: * An existing VolumeSnapshot object (snapshot.storage.k8s.io/VolumeSnapshot) * An existing PVC (PersistentVolumeClaim) If the provisioner or an external controller can support the specified data source, it will create a new volume based on the contents of the specified data source. If the AnyVolumeDataSource feature gate is enabled, this field will always have the same contents as the DataSourceRef field.'
+                                      properties:
+                                        apiGroup:
+                                          description: APIGroup is the group for the resource being referenced. If APIGroup is not specified, the specified Kind must be in the core API group. For any other third-party types, APIGroup is required.
+                                          type: string
+                                        kind:
+                                          description: Kind is the type of resource being referenced
+                                          type: string
+                                        name:
+                                          description: Name is the name of resource being referenced
+                                          type: string
+                                      required:
+                                      - kind
+                                      - name
+                                      type: object
+                                    dataSourceRef:
+                                      description: 'Specifies the object from which to populate the volume with data, if a non-empty volume is desired. This may be any local object from a non-empty API group (non core object) or a PersistentVolumeClaim object. When this field is specified, volume binding will only succeed if the type of the specified object matches some installed volume populator or dynamic provisioner. This field will replace the functionality of the DataSource field and as such if both fields are non-empty, they must have the same value. For backwards compatibility, both fields (DataSource and DataSourceRef) will be set to the same value automatically if one of them is empty and the other is non-empty. There are two important differences between DataSource and DataSourceRef: * While DataSource only allows two specific types of objects, DataSourceRef   allows any non-core object, as well as PersistentVolumeClaim objects. * While DataSource ignores disallowed values (dropping them), DataSourceRef   preserves all values, and generates an error if a disallowed value is   specified. (Alpha) Using this field requires the AnyVolumeDataSource feature gate to be enabled.'
                                      properties:
                                        apiGroup:
                                          description: APIGroup is the group for the resource being referenced. If APIGroup is not specified, the specified Kind must be in the core API group. For any other third-party types, APIGroup is required.
@@ -254,7 +254,7 @@ spec:
                                          type: object
                                      type: object
                                    namespaceSelector:
-                                      description: A label query over the set of namespaces that the term applies to. The term is applied to the union of the namespaces selected by this field and the ones listed in the namespaces field. null selector and null or empty namespaces list means "this pod's namespace". An empty selector ({}) matches all namespaces. This field is alpha-level and is only honored when PodAffinityNamespaceSelector feature is enabled.
+                                      description: A label query over the set of namespaces that the term applies to. The term is applied to the union of the namespaces selected by this field and the ones listed in the namespaces field. null selector and null or empty namespaces list means "this pod's namespace". An empty selector ({}) matches all namespaces. This field is beta-level and is only honored when PodAffinityNamespaceSelector feature is enabled.
                                      properties:
                                        matchExpressions:
                                          description: matchExpressions is a list of label selector requirements. The requirements are ANDed.
@@ -339,7 +339,7 @@ spec:
                                      type: object
                                  type: object
                                namespaceSelector:
-                                  description: A label query over the set of namespaces that the term applies to. The term is applied to the union of the namespaces selected by this field and the ones listed in the namespaces field. null selector and null or empty namespaces list means "this pod's namespace". An empty selector ({}) matches all namespaces. This field is alpha-level and is only honored when PodAffinityNamespaceSelector feature is enabled.
+                                  description: A label query over the set of namespaces that the term applies to. The term is applied to the union of the namespaces selected by this field and the ones listed in the namespaces field. null selector and null or empty namespaces list means "this pod's namespace". An empty selector ({}) matches all namespaces. This field is beta-level and is only honored when PodAffinityNamespaceSelector feature is enabled.
                                  properties:
                                    matchExpressions:
                                      description: matchExpressions is a list of label selector requirements. The requirements are ANDed.
@@ -423,7 +423,7 @@ spec:
                                          type: object
                                      type: object
                                    namespaceSelector:
-                                      description: A label query over the set of namespaces that the term applies to. The term is applied to the union of the namespaces selected by this field and the ones listed in the namespaces field. null selector and null or empty namespaces list means "this pod's namespace". An empty selector ({}) matches all namespaces. This field is alpha-level and is only honored when PodAffinityNamespaceSelector feature is enabled.
+                                      description: A label query over the set of namespaces that the term applies to. The term is applied to the union of the namespaces selected by this field and the ones listed in the namespaces field. null selector and null or empty namespaces list means "this pod's namespace". An empty selector ({}) matches all namespaces. This field is beta-level and is only honored when PodAffinityNamespaceSelector feature is enabled.
                                      properties:
                                        matchExpressions:
                                          description: matchExpressions is a list of label selector requirements. The requirements are ANDed.
@@ -508,7 +508,7 @@ spec:
                                      type: object
                                  type: object
                                namespaceSelector:
-                                  description: A label query over the set of namespaces that the term applies to. The term is applied to the union of the namespaces selected by this field and the ones listed in the namespaces field. null selector and null or empty namespaces list means "this pod's namespace". An empty selector ({}) matches all namespaces. This field is alpha-level and is only honored when PodAffinityNamespaceSelector feature is enabled.
+                                  description: A label query over the set of namespaces that the term applies to. The term is applied to the union of the namespaces selected by this field and the ones listed in the namespaces field. null selector and null or empty namespaces list means "this pod's namespace". An empty selector ({}) matches all namespaces. This field is beta-level and is only honored when PodAffinityNamespaceSelector feature is enabled.
                                  properties:
                                    matchExpressions:
                                      description: matchExpressions is a list of label selector requirements. The requirements are ANDed.
@@ -560,12 +560,12 @@ spec:
                      description: A single application container that you want to run within a pod.
                      properties:
                        args:
-                          description: 'Arguments to the entrypoint. The docker image''s CMD is used if this is not provided. Variable references $(VAR_NAME) are expanded using the container''s environment. If a variable cannot be resolved, the reference in the input string will be unchanged. The $(VAR_NAME) syntax can be escaped with a double $$, ie: $$(VAR_NAME). Escaped references will never be expanded, regardless of whether the variable exists or not. Cannot be updated. More info: https://kubernetes.io/docs/tasks/inject-data-application/define-command-argument-container/#running-a-command-in-a-shell'
+                          description: 'Arguments to the entrypoint. The docker image''s CMD is used if this is not provided. Variable references $(VAR_NAME) are expanded using the container''s environment. If a variable cannot be resolved, the reference in the input string will be unchanged. Double $$ are reduced to a single $, which allows for escaping the $(VAR_NAME) syntax: i.e. "$$(VAR_NAME)" will produce the string literal "$(VAR_NAME)". Escaped references will never be expanded, regardless of whether the variable exists or not. Cannot be updated. More info: https://kubernetes.io/docs/tasks/inject-data-application/define-command-argument-container/#running-a-command-in-a-shell'
                          items:
                            type: string
                          type: array
                        command:
-                          description: 'Entrypoint array. Not executed within a shell. The docker image''s ENTRYPOINT is used if this is not provided. Variable references $(VAR_NAME) are expanded using the container''s environment. If a variable cannot be resolved, the reference in the input string will be unchanged. The $(VAR_NAME) syntax can be escaped with a double $$, ie: $$(VAR_NAME). Escaped references will never be expanded, regardless of whether the variable exists or not. Cannot be updated. More info: https://kubernetes.io/docs/tasks/inject-data-application/define-command-argument-container/#running-a-command-in-a-shell'
+                          description: 'Entrypoint array. Not executed within a shell. The docker image''s ENTRYPOINT is used if this is not provided. Variable references $(VAR_NAME) are expanded using the container''s environment. If a variable cannot be resolved, the reference in the input string will be unchanged. Double $$ are reduced to a single $, which allows for escaping the $(VAR_NAME) syntax: i.e. "$$(VAR_NAME)" will produce the string literal "$(VAR_NAME)". Escaped references will never be expanded, regardless of whether the variable exists or not. Cannot be updated. More info: https://kubernetes.io/docs/tasks/inject-data-application/define-command-argument-container/#running-a-command-in-a-shell'
                          items:
                            type: string
                          type: array
@@ -578,7 +578,7 @@ spec:
                                description: Name of the environment variable. Must be a C_IDENTIFIER.
                                type: string
                              value:
-                                description: 'Variable references $(VAR_NAME) are expanded using the previous defined environment variables in the container and any service environment variables. If a variable cannot be resolved, the reference in the input string will be unchanged. The $(VAR_NAME) syntax can be escaped with a double $$, ie: $$(VAR_NAME). Escaped references will never be expanded, regardless of whether the variable exists or not. Defaults to "".'
+                                description: 'Variable references $(VAR_NAME) are expanded using the previously defined environment variables in the container and any service environment variables. If a variable cannot be resolved, the reference in the input string will be unchanged. Double $$ are reduced to a single $, which allows for escaping the $(VAR_NAME) syntax: i.e. "$$(VAR_NAME)" will produce the string literal "$(VAR_NAME)". Escaped references will never be expanded, regardless of whether the variable exists or not. Defaults to "".'
                                type: string
                              valueFrom:
                                description: Source for the environment variable's value. Cannot be used if value is not empty.
@@ -900,7 +900,7 @@ spec:
                              - port
                              type: object
                            terminationGracePeriodSeconds:
-                              description: Optional duration in seconds the pod needs to terminate gracefully upon probe failure. The grace period is the duration in seconds after the processes running in the pod are sent a termination signal and the time when the processes are forcibly halted with a kill signal. Set this value longer than the expected cleanup time for your process. If this value is nil, the pod's terminationGracePeriodSeconds will be used. Otherwise, this value overrides the value provided by the pod spec. Value must be non-negative integer. The value zero indicates stop immediately via the kill signal (no opportunity to shut down). This is an alpha field and requires enabling ProbeTerminationGracePeriod feature gate.
+                              description: Optional duration in seconds the pod needs to terminate gracefully upon probe failure. The grace period is the duration in seconds after the processes running in the pod are sent a termination signal and the time when the processes are forcibly halted with a kill signal. Set this value longer than the expected cleanup time for your process. If this value is nil, the pod's terminationGracePeriodSeconds will be used. Otherwise, this value overrides the value provided by the pod spec. Value must be non-negative integer. The value zero indicates stop immediately via the kill signal (no opportunity to shut down). This is a beta field and requires enabling ProbeTerminationGracePeriod feature gate. Minimum value is 1. spec.terminationGracePeriodSeconds is used if unset.
                              format: int64
                              type: integer
                            timeoutSeconds:
@@ -1023,7 +1023,7 @@ spec:
                              - port
                              type: object
                            terminationGracePeriodSeconds:
-                              description: Optional duration in seconds the pod needs to terminate gracefully upon probe failure. The grace period is the duration in seconds after the processes running in the pod are sent a termination signal and the time when the processes are forcibly halted with a kill signal. Set this value longer than the expected cleanup time for your process. If this value is nil, the pod's terminationGracePeriodSeconds will be used. Otherwise, this value overrides the value provided by the pod spec. Value must be non-negative integer. The value zero indicates stop immediately via the kill signal (no opportunity to shut down). This is an alpha field and requires enabling ProbeTerminationGracePeriod feature gate.
+                              description: Optional duration in seconds the pod needs to terminate gracefully upon probe failure. The grace period is the duration in seconds after the processes running in the pod are sent a termination signal and the time when the processes are forcibly halted with a kill signal. Set this value longer than the expected cleanup time for your process. If this value is nil, the pod's terminationGracePeriodSeconds will be used. Otherwise, this value overrides the value provided by the pod spec. Value must be non-negative integer. The value zero indicates stop immediately via the kill signal (no opportunity to shut down). This is a beta field and requires enabling ProbeTerminationGracePeriod feature gate. Minimum value is 1. spec.terminationGracePeriodSeconds is used if unset.
                              format: int64
                              type: integer
                            timeoutSeconds:
@@ -1054,7 +1054,7 @@ spec:
                              type: object
                          type: object
                        securityContext:
-                          description: 'Security options the pod should run with. More info: https://kubernetes.io/docs/concepts/policy/security-context/ More info: https://kubernetes.io/docs/tasks/configure-pod-container/security-context/'
+                          description: 'SecurityContext defines the security options the container should be run with. If set, the fields of SecurityContext override the equivalent fields of PodSecurityContext. More info: https://kubernetes.io/docs/tasks/configure-pod-container/security-context/'
                          properties:
                            allowPrivilegeEscalation:
                              description: 'AllowPrivilegeEscalation controls whether a process can gain more privileges than its parent process. This bool directly controls if the no_new_privs flag will be set on the container process. AllowPrivilegeEscalation is true always when the container is: 1) run as Privileged 2) has CAP_SYS_ADMIN'
@@ -1132,6 +1132,9 @@ spec:
                                gmsaCredentialSpecName:
                                  description: GMSACredentialSpecName is the name of the GMSA credential spec to use.
                                  type: string
+                                hostProcess:
+                                  description: HostProcess determines if a container should be run as a 'Host Process' container. This field is alpha-level and will only be honored by components that enable the WindowsHostProcessContainers feature flag. Setting this field without the feature flag will result in errors when validating the Pod. All of a Pod's containers must have the same effective HostProcess value (it is not allowed to have a mix of HostProcess containers and non-HostProcess containers).  In addition, if HostProcess is true then HostNetwork must also be set to true.
+                                  type: boolean
                                runAsUserName:
                                  description: The UserName in Windows to run the entrypoint of the container process. Defaults to the user specified in image metadata if unspecified. May also be set in PodSecurityContext. If set in both SecurityContext and PodSecurityContext, the value specified in SecurityContext takes precedence.
                                  type: string
@@ -1218,7 +1221,7 @@ spec:
                              - port
                              type: object
                            terminationGracePeriodSeconds:
-                              description: Optional duration in seconds the pod needs to terminate gracefully upon probe failure. The grace period is the duration in seconds after the processes running in the pod are sent a termination signal and the time when the processes are forcibly halted with a kill signal. Set this value longer than the expected cleanup time for your process. If this value is nil, the pod's terminationGracePeriodSeconds will be used. Otherwise, this value overrides the value provided by the pod spec. Value must be non-negative integer. The value zero indicates stop immediately via the kill signal (no opportunity to shut down). This is an alpha field and requires enabling ProbeTerminationGracePeriod feature gate.
+                              description: Optional duration in seconds the pod needs to terminate gracefully upon probe failure. The grace period is the duration in seconds after the processes running in the pod are sent a termination signal and the time when the processes are forcibly halted with a kill signal. Set this value longer than the expected cleanup time for your process. If this value is nil, the pod's terminationGracePeriodSeconds will be used. Otherwise, this value overrides the value provided by the pod spec. Value must be non-negative integer. The value zero indicates stop immediately via the kill signal (no opportunity to shut down). This is a beta field and requires enabling ProbeTerminationGracePeriod feature gate. Minimum value is 1. spec.terminationGracePeriodSeconds is used if unset.
                              format: int64
                              type: integer
                            timeoutSeconds:
@@ -1330,12 +1333,12 @@ spec:
                      description: An EphemeralContainer is a container that may be added temporarily to an existing pod for user-initiated activities such as debugging. Ephemeral containers have no resource or scheduling guarantees, and they will not be restarted when they exit or when a pod is removed or restarted. If an ephemeral container causes a pod to exceed its resource allocation, the pod may be evicted. Ephemeral containers may not be added by directly updating the pod spec. They must be added via the pod's ephemeralcontainers subresource, and they will appear in the pod spec once added. This is an alpha feature enabled by the EphemeralContainers feature flag.
                      properties:
                        args:
-                          description: 'Arguments to the entrypoint. The docker image''s CMD is used if this is not provided. Variable references $(VAR_NAME) are expanded using the container''s environment. If a variable cannot be resolved, the reference in the input string will be unchanged. The $(VAR_NAME) syntax can be escaped with a double $$, ie: $$(VAR_NAME). Escaped references will never be expanded, regardless of whether the variable exists or not. Cannot be updated. More info: https://kubernetes.io/docs/tasks/inject-data-application/define-command-argument-container/#running-a-command-in-a-shell'
+                          description: 'Arguments to the entrypoint. The docker image''s CMD is used if this is not provided. Variable references $(VAR_NAME) are expanded using the container''s environment. If a variable cannot be resolved, the reference in the input string will be unchanged. Double $$ are reduced to a single $, which allows for escaping the $(VAR_NAME) syntax: i.e. "$$(VAR_NAME)" will produce the string literal "$(VAR_NAME)". Escaped references will never be expanded, regardless of whether the variable exists or not. Cannot be updated. More info: https://kubernetes.io/docs/tasks/inject-data-application/define-command-argument-container/#running-a-command-in-a-shell'
                          items:
                            type: string
                          type: array
                        command:
-                          description: 'Entrypoint array. Not executed within a shell. The docker image''s ENTRYPOINT is used if this is not provided. Variable references $(VAR_NAME) are expanded using the container''s environment. If a variable cannot be resolved, the reference in the input string will be unchanged. The $(VAR_NAME) syntax can be escaped with a double $$, ie: $$(VAR_NAME). Escaped references will never be expanded, regardless of whether the variable exists or not. Cannot be updated. More info: https://kubernetes.io/docs/tasks/inject-data-application/define-command-argument-container/#running-a-command-in-a-shell'
+                          description: 'Entrypoint array. Not executed within a shell. The docker image''s ENTRYPOINT is used if this is not provided. Variable references $(VAR_NAME) are expanded using the container''s environment. If a variable cannot be resolved, the reference in the input string will be unchanged. Double $$ are reduced to a single $, which allows for escaping the $(VAR_NAME) syntax: i.e. "$$(VAR_NAME)" will produce the string literal "$(VAR_NAME)". Escaped references will never be expanded, regardless of whether the variable exists or not. Cannot be updated. More info: https://kubernetes.io/docs/tasks/inject-data-application/define-command-argument-container/#running-a-command-in-a-shell'
                          items:
                            type: string
                          type: array
@@ -1348,7 +1351,7 @@ spec:
                                description: Name of the environment variable. Must be a C_IDENTIFIER.
                                type: string
                              value:
-                                description: 'Variable references $(VAR_NAME) are expanded using the previous defined environment variables in the container and any service environment variables. If a variable cannot be resolved, the reference in the input string will be unchanged. The $(VAR_NAME) syntax can be escaped with a double $$, ie: $$(VAR_NAME). Escaped references will never be expanded, regardless of whether the variable exists or not. Defaults to "".'
+                                description: 'Variable references $(VAR_NAME) are expanded using the previously defined environment variables in the container and any service environment variables. If a variable cannot be resolved, the reference in the input string will be unchanged. Double $$ are reduced to a single $, which allows for escaping the $(VAR_NAME) syntax: i.e. "$$(VAR_NAME)" will produce the string literal "$(VAR_NAME)". Escaped references will never be expanded, regardless of whether the variable exists or not. Defaults to "".'
                                type: string
                              valueFrom:
                                description: Source for the environment variable's value. Cannot be used if value is not empty.
@@ -1670,7 +1673,7 @@ spec:
                              - port
                              type: object
                            terminationGracePeriodSeconds:
-                              description: Optional duration in seconds the pod needs to terminate gracefully upon probe failure. The grace period is the duration in seconds after the processes running in the pod are sent a termination signal and the time when the processes are forcibly halted with a kill signal. Set this value longer than the expected cleanup time for your process. If this value is nil, the pod's terminationGracePeriodSeconds will be used. Otherwise, this value overrides the value provided by the pod spec. Value must be non-negative integer. The value zero indicates stop immediately via the kill signal (no opportunity to shut down). This is an alpha field and requires enabling ProbeTerminationGracePeriod feature gate.
+                              description: Optional duration in seconds the pod needs to terminate gracefully upon probe failure. The grace period is the duration in seconds after the processes running in the pod are sent a termination signal and the time when the processes are forcibly halted with a kill signal. Set this value longer than the expected cleanup time for your process. If this value is nil, the pod's terminationGracePeriodSeconds will be used. Otherwise, this value overrides the value provided by the pod spec. Value must be non-negative integer. The value zero indicates stop immediately via the kill signal (no opportunity to shut down). This is a beta field and requires enabling ProbeTerminationGracePeriod feature gate. Minimum value is 1. spec.terminationGracePeriodSeconds is used if unset.
                              format: int64
                              type: integer
                            timeoutSeconds:
@@ -1789,7 +1792,7 @@ spec:
                              - port
                              type: object
                            terminationGracePeriodSeconds:
-                              description: Optional duration in seconds the pod needs to terminate gracefully upon probe failure. The grace period is the duration in seconds after the processes running in the pod are sent a termination signal and the time when the processes are forcibly halted with a kill signal. Set this value longer than the expected cleanup time for your process. If this value is nil, the pod's terminationGracePeriodSeconds will be used. Otherwise, this value overrides the value provided by the pod spec. Value must be non-negative integer. The value zero indicates stop immediately via the kill signal (no opportunity to shut down). This is an alpha field and requires enabling ProbeTerminationGracePeriod feature gate.
+                              description: Optional duration in seconds the pod needs to terminate gracefully upon probe failure. The grace period is the duration in seconds after the processes running in the pod are sent a termination signal and the time when the processes are forcibly halted with a kill signal. Set this value longer than the expected cleanup time for your process. If this value is nil, the pod's terminationGracePeriodSeconds will be used. Otherwise, this value overrides the value provided by the pod spec. Value must be non-negative integer. The value zero indicates stop immediately via the kill signal (no opportunity to shut down). This is a beta field and requires enabling ProbeTerminationGracePeriod feature gate. Minimum value is 1. spec.terminationGracePeriodSeconds is used if unset.
                              format: int64
                              type: integer
                            timeoutSeconds:
@@ -1820,7 +1823,7 @@ spec:
                              type: object
                          type: object
                        securityContext:
-                          description: SecurityContext is not allowed for ephemeral containers.
+                          description: 'Optional: SecurityContext defines the security options the ephemeral container should be run with. If set, the fields of SecurityContext override the equivalent fields of PodSecurityContext.'
                          properties:
                            allowPrivilegeEscalation:
                              description: 'AllowPrivilegeEscalation controls whether a process can gain more privileges than its parent process. This bool directly controls if the no_new_privs flag will be set on the container process. AllowPrivilegeEscalation is true always when the container is: 1) run as Privileged 2) has CAP_SYS_ADMIN'
@@ -1898,6 +1901,9 @@ spec:
                                gmsaCredentialSpecName:
                                  description: GMSACredentialSpecName is the name of the GMSA credential spec to use.
                                  type: string
+                                hostProcess:
+                                  description: HostProcess determines if a container should be run as a 'Host Process' container. This field is alpha-level and will only be honored by components that enable the WindowsHostProcessContainers feature flag. Setting this field without the feature flag will result in errors when validating the Pod. All of a Pod's containers must have the same effective HostProcess value (it is not allowed to have a mix of HostProcess containers and non-HostProcess containers).  In addition, if HostProcess is true then HostNetwork must also be set to true.
+                                  type: boolean
                                runAsUserName:
                                  description: The UserName in Windows to run the entrypoint of the container process. Defaults to the user specified in image metadata if unspecified. May also be set in PodSecurityContext. If set in both SecurityContext and PodSecurityContext, the value specified in SecurityContext takes precedence.
                                  type: string
@@ -1984,7 +1990,7 @@ spec:
                              - port
                              type: object
                            terminationGracePeriodSeconds:
-                              description: Optional duration in seconds the pod needs to terminate gracefully upon probe failure. The grace period is the duration in seconds after the processes running in the pod are sent a termination signal and the time when the processes are forcibly halted with a kill signal. Set this value longer than the expected cleanup time for your process. If this value is nil, the pod's terminationGracePeriodSeconds will be used. Otherwise, this value overrides the value provided by the pod spec. Value must be non-negative integer. The value zero indicates stop immediately via the kill signal (no opportunity to shut down). This is an alpha field and requires enabling ProbeTerminationGracePeriod feature gate.
+                              description: Optional duration in seconds the pod needs to terminate gracefully upon probe failure. The grace period is the duration in seconds after the processes running in the pod are sent a termination signal and the time when the processes are forcibly halted with a kill signal. Set this value longer than the expected cleanup time for your process. If this value is nil, the pod's terminationGracePeriodSeconds will be used. Otherwise, this value overrides the value provided by the pod spec. Value must be non-negative integer. The value zero indicates stop immediately via the kill signal (no opportunity to shut down). This is a beta field and requires enabling ProbeTerminationGracePeriod feature gate. Minimum value is 1. spec.terminationGracePeriodSeconds is used if unset.
                              format: int64
                              type: integer
                            timeoutSeconds:
@@ -2104,12 +2110,12 @@ spec:
                      description: A single application container that you want to run within a pod.
                      properties:
                        args:
-                          description: 'Arguments to the entrypoint. The docker image''s CMD is used if this is not provided. Variable references $(VAR_NAME) are expanded using the container''s environment. If a variable cannot be resolved, the reference in the input string will be unchanged. The $(VAR_NAME) syntax can be escaped with a double $$, ie: $$(VAR_NAME). Escaped references will never be expanded, regardless of whether the variable exists or not. Cannot be updated. More info: https://kubernetes.io/docs/tasks/inject-data-application/define-command-argument-container/#running-a-command-in-a-shell'
+                          description: 'Arguments to the entrypoint. The docker image''s CMD is used if this is not provided. Variable references $(VAR_NAME) are expanded using the container''s environment. If a variable cannot be resolved, the reference in the input string will be unchanged. Double $$ are reduced to a single $, which allows for escaping the $(VAR_NAME) syntax: i.e. "$$(VAR_NAME)" will produce the string literal "$(VAR_NAME)". Escaped references will never be expanded, regardless of whether the variable exists or not. Cannot be updated. More info: https://kubernetes.io/docs/tasks/inject-data-application/define-command-argument-container/#running-a-command-in-a-shell'
                          items:
                            type: string
                          type: array
                        command:
-                          description: 'Entrypoint array. Not executed within a shell. The docker image''s ENTRYPOINT is used if this is not provided. Variable references $(VAR_NAME) are expanded using the container''s environment. If a variable cannot be resolved, the reference in the input string will be unchanged. The $(VAR_NAME) syntax can be escaped with a double $$, ie: $$(VAR_NAME). Escaped references will never be expanded, regardless of whether the variable exists or not. Cannot be updated. More info: https://kubernetes.io/docs/tasks/inject-data-application/define-command-argument-container/#running-a-command-in-a-shell'
+                          description: 'Entrypoint array. Not executed within a shell. The docker image''s ENTRYPOINT is used if this is not provided. Variable references $(VAR_NAME) are expanded using the container''s environment. If a variable cannot be resolved, the reference in the input string will be unchanged. Double $$ are reduced to a single $, which allows for escaping the $(VAR_NAME) syntax: i.e. "$$(VAR_NAME)" will produce the string literal "$(VAR_NAME)". Escaped references will never be expanded, regardless of whether the variable exists or not. Cannot be updated. More info: https://kubernetes.io/docs/tasks/inject-data-application/define-command-argument-container/#running-a-command-in-a-shell'
                          items:
                            type: string
                          type: array
@@ -2122,7 +2128,7 @@ spec:
                                description: Name of the environment variable. Must be a C_IDENTIFIER.
                                type: string
                              value:
-                                description: 'Variable references $(VAR_NAME) are expanded using the previous defined environment variables in the container and any service environment variables. If a variable cannot be resolved, the reference in the input string will be unchanged. The $(VAR_NAME) syntax can be escaped with a double $$, ie: $$(VAR_NAME). Escaped references will never be expanded, regardless of whether the variable exists or not. Defaults to "".'
+                                description: 'Variable references $(VAR_NAME) are expanded using the previously defined environment variables in the container and any service environment variables. If a variable cannot be resolved, the reference in the input string will be unchanged. Double $$ are reduced to a single $, which allows for escaping the $(VAR_NAME) syntax: i.e. "$$(VAR_NAME)" will produce the string literal "$(VAR_NAME)". Escaped references will never be expanded, regardless of whether the variable exists or not. Defaults to "".'
                                type: string
                              valueFrom:
                                description: Source for the environment variable's value. Cannot be used if value is not empty.
@@ -2444,7 +2450,7 @@ spec:
                              - port
                              type: object
                            terminationGracePeriodSeconds:
-                              description: Optional duration in seconds the pod needs to terminate gracefully upon probe failure. The grace period is the duration in seconds after the processes running in the pod are sent a termination signal and the time when the processes are forcibly halted with a kill signal. Set this value longer than the expected cleanup time for your process. If this value is nil, the pod's terminationGracePeriodSeconds will be used. Otherwise, this value overrides the value provided by the pod spec. Value must be non-negative integer. The value zero indicates stop immediately via the kill signal (no opportunity to shut down). This is an alpha field and requires enabling ProbeTerminationGracePeriod feature gate.
+                              description: Optional duration in seconds the pod needs to terminate gracefully upon probe failure. The grace period is the duration in seconds after the processes running in the pod are sent a termination signal and the time when the processes are forcibly halted with a kill signal. Set this value longer than the expected cleanup time for your process. If this value is nil, the pod's terminationGracePeriodSeconds will be used. Otherwise, this value overrides the value provided by the pod spec. Value must be non-negative integer. The value zero indicates stop immediately via the kill signal (no opportunity to shut down). This is a beta field and requires enabling ProbeTerminationGracePeriod feature gate. Minimum value is 1. spec.terminationGracePeriodSeconds is used if unset.
                              format: int64
                              type: integer
                            timeoutSeconds:
@@ -2567,7 +2573,7 @@ spec:
                              - port
                              type: object
                            terminationGracePeriodSeconds:
-                              description: Optional duration in seconds the pod needs to terminate gracefully upon probe failure. The grace period is the duration in seconds after the processes running in the pod are sent a termination signal and the time when the processes are forcibly halted with a kill signal. Set this value longer than the expected cleanup time for your process. If this value is nil, the pod's terminationGracePeriodSeconds will be used. Otherwise, this value overrides the value provided by the pod spec. Value must be non-negative integer. The value zero indicates stop immediately via the kill signal (no opportunity to shut down). This is an alpha field and requires enabling ProbeTerminationGracePeriod feature gate.
+                              description: Optional duration in seconds the pod needs to terminate gracefully upon probe failure. The grace period is the duration in seconds after the processes running in the pod are sent a termination signal and the time when the processes are forcibly halted with a kill signal. Set this value longer than the expected cleanup time for your process. If this value is nil, the pod's terminationGracePeriodSeconds will be used. Otherwise, this value overrides the value provided by the pod spec. Value must be non-negative integer. The value zero indicates stop immediately via the kill signal (no opportunity to shut down). This is a beta field and requires enabling ProbeTerminationGracePeriod feature gate. Minimum value is 1. spec.terminationGracePeriodSeconds is used if unset.
                              format: int64
                              type: integer
                            timeoutSeconds:
@@ -2598,7 +2604,7 @@ spec:
                              type: object
                          type: object
                        securityContext:
-                          description: 'Security options the pod should run with. More info: https://kubernetes.io/docs/concepts/policy/security-context/ More info: https://kubernetes.io/docs/tasks/configure-pod-container/security-context/'
+                          description: 'SecurityContext defines the security options the container should be run with. If set, the fields of SecurityContext override the equivalent fields of PodSecurityContext. More info: https://kubernetes.io/docs/tasks/configure-pod-container/security-context/'
                          properties:
                            allowPrivilegeEscalation:
                              description: 'AllowPrivilegeEscalation controls whether a process can gain more privileges than its parent process. This bool directly controls if the no_new_privs flag will be set on the container process. AllowPrivilegeEscalation is true always when the container is: 1) run as Privileged 2) has CAP_SYS_ADMIN'
@@ -2676,6 +2682,9 @@ spec:
                                gmsaCredentialSpecName:
                                  description: GMSACredentialSpecName is the name of the GMSA credential spec to use.
                                  type: string
+                                hostProcess:
+                                  description: HostProcess determines if a container should be run as a 'Host Process' container. This field is alpha-level and will only be honored by components that enable the WindowsHostProcessContainers feature flag. Setting this field without the feature flag will result in errors when validating the Pod. All of a Pod's containers must have the same effective HostProcess value (it is not allowed to have a mix of HostProcess containers and non-HostProcess containers).  In addition, if HostProcess is true then HostNetwork must also be set to true.
+                                  type: boolean
                                runAsUserName:
                                  description: The UserName in Windows to run the entrypoint of the container process. Defaults to the user specified in image metadata if unspecified. May also be set in PodSecurityContext. If set in both SecurityContext and PodSecurityContext, the value specified in SecurityContext takes precedence.
                                  type: string
@@ -2762,7 +2771,7 @@ spec:
                              - port
                              type: object
                            terminationGracePeriodSeconds:
-                              description: Optional duration in seconds the pod needs to terminate gracefully upon probe failure. The grace period is the duration in seconds after the processes running in the pod are sent a termination signal and the time when the processes are forcibly halted with a kill signal. Set this value longer than the expected cleanup time for your process. If this value is nil, the pod's terminationGracePeriodSeconds will be used. Otherwise, this value overrides the value provided by the pod spec. Value must be non-negative integer. The value zero indicates stop immediately via the kill signal (no opportunity to shut down). This is an alpha field and requires enabling ProbeTerminationGracePeriod feature gate.
+                              description: Optional duration in seconds the pod needs to terminate gracefully upon probe failure. The grace period is the duration in seconds after the processes running in the pod are sent a termination signal and the time when the processes are forcibly halted with a kill signal. Set this value longer than the expected cleanup time for your process. If this value is nil, the pod's terminationGracePeriodSeconds will be used. Otherwise, this value overrides the value provided by the pod spec. Value must be non-negative integer. The value zero indicates stop immediately via the kill signal (no opportunity to shut down). This is a beta field and requires enabling ProbeTerminationGracePeriod feature gate. Minimum value is 1. spec.terminationGracePeriodSeconds is used if unset.
                              format: int64
                              type: integer
                            timeoutSeconds:
@@ -2844,6 +2853,7 @@ spec:
                      type: string
                    description: 'NodeSelector is a selector which must be true for the pod to fit on a node. Selector which must match a node''s labels for the pod to be scheduled on that node. More info: https://kubernetes.io/docs/concepts/configuration/assign-pod-node/'
                    type: object
+                    x-kubernetes-map-type: atomic
                  overhead:
                    additionalProperties:
                      anyOf:
@@ -2851,7 +2861,7 @@ spec:
                      - type: string
                      pattern: ^(\+|-)?(([0-9]+(\.[0-9]*)?)|(\.[0-9]+))(([KMGTPE]i)|[numkMGTPE]|([eE](\+|-)?(([0-9]+(\.[0-9]*)?)|(\.[0-9]+))))?$
                      x-kubernetes-int-or-string: true
-                    description: 'Overhead represents the resource overhead associated with running a pod for a given RuntimeClass. This field will be autopopulated at admission time by the RuntimeClass admission controller. If the RuntimeClass admission controller is enabled, overhead must not be set in Pod create requests. The RuntimeClass admission controller will reject Pod create requests which have the overhead already set. If RuntimeClass is configured and selected in the PodSpec, Overhead will be set to the value defined in the corresponding RuntimeClass, otherwise it will remain unset and treated as zero. More info: https://git.k8s.io/enhancements/keps/sig-node/20190226-pod-overhead.md This field is alpha-level as of Kubernetes v1.16, and is only honored by servers that enable the PodOverhead feature.'
+                    description: 'Overhead represents the resource overhead associated with running a pod for a given RuntimeClass. This field will be autopopulated at admission time by the RuntimeClass admission controller. If the RuntimeClass admission controller is enabled, overhead must not be set in Pod create requests. The RuntimeClass admission controller will reject Pod create requests which have the overhead already set. If RuntimeClass is configured and selected in the PodSpec, Overhead will be set to the value defined in the corresponding RuntimeClass, otherwise it will remain unset and treated as zero. More info: https://git.k8s.io/enhancements/keps/sig-node/688-pod-overhead/README.md This field is beta-level as of Kubernetes v1.18, and is only honored by servers that enable the PodOverhead feature.'
                    type: object
                  preemptionPolicy:
                    description: PreemptionPolicy is the Policy for preempting pods with lower priority. One of Never, PreemptLowerPriority. Defaults to PreemptLowerPriority if unset. This field is beta-level, gated by the NonPreemptingPriority feature-gate.
@@ -2864,7 +2874,7 @@ spec:
                    description: If specified, indicates the pod's priority. "system-node-critical" and "system-cluster-critical" are two special keywords which indicate the highest priorities with the former being the highest priority. Any other name must be defined by creating a PriorityClass object with that name. If not specified, the pod priority will be default or zero if there is no default.
                    type: string
                  readinessGates:
-                    description: 'If specified, all readiness gates will be evaluated for pod readiness. A pod is ready when all its containers are ready AND all conditions specified in the readiness gates have status equal to "True" More info: https://git.k8s.io/enhancements/keps/sig-network/0007-pod-ready%2B%2B.md'
+                    description: 'If specified, all readiness gates will be evaluated for pod readiness. A pod is ready when all its containers are ready AND all conditions specified in the readiness gates have status equal to "True" More info: https://git.k8s.io/enhancements/keps/sig-network/580-pod-readiness-gates'
                    items:
                      description: PodReadinessGate contains the reference to a pod condition
                      properties:
@@ -2879,7 +2889,7 @@ spec:
                    description: 'Restart policy for all containers within the pod. One of Always, OnFailure, Never. Default to Always. More info: https://kubernetes.io/docs/concepts/workloads/pods/pod-lifecycle/#restart-policy'
                    type: string
                  runtimeClassName:
-                    description: 'RuntimeClassName refers to a RuntimeClass object in the node.k8s.io group, which should be used to run this pod.  If no RuntimeClass resource matches the named class, the pod will not be run. If unset or empty, the "legacy" RuntimeClass will be used, which is an implicit class with an empty definition that uses the default runtime handler. More info: https://git.k8s.io/enhancements/keps/sig-node/runtime-class.md This is a beta feature as of Kubernetes v1.14.'
+                    description: 'RuntimeClassName refers to a RuntimeClass object in the node.k8s.io group, which should be used to run this pod.  If no RuntimeClass resource matches the named class, the pod will not be run. If unset or empty, the "legacy" RuntimeClass will be used, which is an implicit class with an empty definition that uses the default runtime handler. More info: https://git.k8s.io/enhancements/keps/sig-node/585-runtime-class This is a beta feature as of Kubernetes v1.14.'
                    type: string
                  schedulerName:
                    description: If specified, the pod will be dispatched by specified scheduler. If not specified, the pod will be dispatched by default scheduler.
@@ -2964,6 +2974,9 @@ spec:
                          gmsaCredentialSpecName:
                            description: GMSACredentialSpecName is the name of the GMSA credential spec to use.
                            type: string
+                          hostProcess:
+                            description: HostProcess determines if a container should be run as a 'Host Process' container. This field is alpha-level and will only be honored by components that enable the WindowsHostProcessContainers feature flag. Setting this field without the feature flag will result in errors when validating the Pod. All of a Pod's containers must have the same effective HostProcess value (it is not allowed to have a mix of HostProcess containers and non-HostProcess containers).  In addition, if HostProcess is true then HostNetwork must also be set to true.
+                            type: boolean
                          runAsUserName:
                            description: The UserName in Windows to run the entrypoint of the container process. Defaults to the user specified in image metadata if unspecified. May also be set in PodSecurityContext. If set in both SecurityContext and PodSecurityContext, the value specified in SecurityContext takes precedence.
                            type: string
@@ -3331,7 +3344,23 @@ spec:
                                        type: string
                                      type: array
                                    dataSource:
-                                      description: 'This field can be used to specify either: * An existing VolumeSnapshot object (snapshot.storage.k8s.io/VolumeSnapshot) * An existing PVC (PersistentVolumeClaim) * An existing custom resource that implements data population (Alpha) In order to use custom resource types that implement data population, the AnyVolumeDataSource feature gate must be enabled. If the provisioner or an external controller can support the specified data source, it will create a new volume based on the contents of the specified data source.'
+                                      description: 'This field can be used to specify either: * An existing VolumeSnapshot object (snapshot.storage.k8s.io/VolumeSnapshot) * An existing PVC (PersistentVolumeClaim) If the provisioner or an external controller can support the specified data source, it will create a new volume based on the contents of the specified data source. If the AnyVolumeDataSource feature gate is enabled, this field will always have the same contents as the DataSourceRef field.'
+                                      properties:
+                                        apiGroup:
+                                          description: APIGroup is the group for the resource being referenced. If APIGroup is not specified, the specified Kind must be in the core API group. For any other third-party types, APIGroup is required.
+                                          type: string
+                                        kind:
+                                          description: Kind is the type of resource being referenced
+                                          type: string
+                                        name:
+                                          description: Name is the name of resource being referenced
+                                          type: string
+                                      required:
+                                      - kind
+                                      - name
+                                      type: object
+                                    dataSourceRef:
+                                      description: 'Specifies the object from which to populate the volume with data, if a non-empty volume is desired. This may be any local object from a non-empty API group (non core object) or a PersistentVolumeClaim object. When this field is specified, volume binding will only succeed if the type of the specified object matches some installed volume populator or dynamic provisioner. This field will replace the functionality of the DataSource field and as such if both fields are non-empty, they must have the same value. For backwards compatibility, both fields (DataSource and DataSourceRef) will be set to the same value automatically if one of them is empty and the other is non-empty. There are two important differences between DataSource and DataSourceRef: * While DataSource only allows two specific types of objects, DataSourceRef   allows any non-core object, as well as PersistentVolumeClaim objects. * While DataSource ignores disallowed values (dropping them), DataSourceRef   preserves all values, and generates an error if a disallowed value is   specified. (Alpha) Using this field requires the AnyVolumeDataSource feature gate to be enabled.'
                                      properties:
                                        apiGroup:
                                          description: APIGroup is the group for the resource being referenced. If APIGroup is not specified, the specified Kind must be in the core API group. For any other third-party types, APIGroup is required.
@@ -1,5 +1,5 @@

-module.exports = async function(context) {
+module.exports = async (context) => {
    return {
        status: 200,
        body: "hello, world!\n"
@@ -4,75 +4,71 @@ go 1.16

 require (
 	contrib.go.opencensus.io/exporter/jaeger v0.2.1
-	github.com/Azure/azure-sdk-for-go v32.5.0+incompatible
-	github.com/Azure/go-autorest/autorest v0.11.18 // indirect
-	github.com/Microsoft/go-winio v0.4.16 // indirect
+	github.com/Azure/azure-sdk-for-go v59.0.0+incompatible
 	github.com/Nvveen/Gotty v0.0.0-20120604004816-cd527374f1e5 // indirect
-	github.com/Shopify/sarama v1.29.1
-	github.com/aws/aws-sdk-go v1.36.33 // indirect
-	github.com/blend/go-sdk v1.20210116.5 // indirect
+	github.com/Shopify/sarama v1.30.0
+	github.com/blend/go-sdk v1.20211025.3 // indirect
 	github.com/bsm/sarama-cluster v2.1.15+incompatible
-	github.com/cenkalti/backoff v2.2.1+incompatible // indirect
-	github.com/containerd/continuity v0.0.0-20201208142359-180525291bb7 // indirect
-	github.com/dchest/uniuri v0.0.0-20160212164326-8902c56451e9
+	github.com/containerd/continuity v0.2.1 // indirect
+	github.com/dchest/uniuri v0.0.0-20200228104902-7aecb25e1fe5
 	github.com/docker/go-connections v0.4.0 // indirect
 	github.com/docopt/docopt-go v0.0.0-20180111231733-ee0de3bc6815
 	github.com/dsnet/compress v0.0.1 // indirect
 	github.com/dustin/go-humanize v1.0.0
-	github.com/emicklei/go-restful v2.9.6+incompatible
-	github.com/emicklei/go-restful-openapi v1.2.0
-	github.com/fatih/color v1.12.0
-	github.com/fsnotify/fsnotify v1.4.9
+	github.com/emicklei/go-restful v2.15.0+incompatible
+	github.com/emicklei/go-restful-openapi v1.4.1
+	github.com/fatih/color v1.13.0
+	github.com/fsnotify/fsnotify v1.5.1
 	github.com/ghodss/yaml v1.0.0
-	github.com/go-git/go-git/v5 v5.2.0
-	github.com/go-ini/ini v1.62.0 // indirect
-	github.com/go-openapi/spec v0.19.5
-	github.com/golang/freetype v0.0.0-20170609003504-e2365dfdc4a0 // indirect
+	github.com/go-git/go-git/v5 v5.4.2
+	github.com/go-ini/ini v1.63.2 // indirect
+	github.com/go-openapi/spec v0.20.4
 	github.com/gorilla/mux v1.8.0
 	github.com/gotestyourself/gotestyourself v2.2.0+incompatible // indirect
 	github.com/graymeta/stow v0.2.7
 	github.com/hashicorp/go-multierror v1.1.1
 	github.com/imdario/mergo v0.3.12
-	github.com/influxdata/influxdb v1.2.0
-	github.com/mholt/archiver v0.0.0-20180417220235-e4ef56d48eb0
+	github.com/influxdata/influxdb v1.9.5
+	github.com/mholt/archiver v2.1.0+incompatible
 	github.com/minio/minio-go v6.0.14+incompatible
-	github.com/nats-io/nats-streaming-server v0.22.0
-	github.com/nats-io/nats.go v1.11.0
-	github.com/nats-io/stan.go v0.9.0
-	github.com/nwaples/rardecode v1.1.0 // indirect
-	github.com/opencontainers/image-spec v1.0.1 // indirect
-	github.com/opencontainers/runc v1.0.1 // indirect
+	github.com/nats-io/nats-streaming-server v0.23.0
+	github.com/nats-io/nats.go v1.13.0
+	github.com/nats-io/stan.go v0.10.0
+	github.com/nwaples/rardecode v1.1.2 // indirect
+	github.com/opencontainers/image-spec v1.0.2 // indirect
+	github.com/opencontainers/runc v1.0.2 // indirect
 	github.com/ory/dockertest v3.3.5+incompatible
 	github.com/pkg/errors v0.9.1
 	github.com/prometheus/client_golang v1.11.0
-	github.com/prometheus/common v0.26.0
-	github.com/robfig/cron v0.0.0-20180505203441-b41be1df6967
-	github.com/satori/go.uuid v1.2.0
+	github.com/prometheus/common v0.32.1
+	github.com/robfig/cron v1.2.0
+	github.com/sabhiram/go-gitignore v0.0.0-20210923224102-525f6e181f06
+	github.com/satori/go.uuid v1.2.1-0.20181028125025-b2ce2384e17b
 	github.com/spf13/cobra v1.2.1
 	github.com/spf13/pflag v1.0.5
 	github.com/stretchr/testify v1.7.0
-	github.com/ulikunitz/xz v0.5.9 // indirect
+	github.com/ulikunitz/xz v0.5.10 // indirect
 	github.com/wcharczuk/go-chart v2.0.1+incompatible
 	go.opencensus.io v0.23.0
-	go.opentelemetry.io/contrib/instrumentation/net/http/otelhttp v0.23.0
-	go.opentelemetry.io/contrib/propagators/aws v0.23.0
-	go.opentelemetry.io/contrib/propagators/b3 v0.23.0
-	go.opentelemetry.io/contrib/propagators/jaeger v0.23.0
-	go.opentelemetry.io/contrib/propagators/ot v0.23.0
-	go.opentelemetry.io/otel v1.0.0
-	go.opentelemetry.io/otel/exporters/otlp/otlptrace v1.0.0
-	go.opentelemetry.io/otel/exporters/otlp/otlptrace/otlptracegrpc v1.0.0
-	go.opentelemetry.io/otel/sdk v1.0.0
-	go.opentelemetry.io/otel/trace v1.0.0
+	go.opentelemetry.io/contrib/instrumentation/net/http/otelhttp v0.26.0
+	go.opentelemetry.io/contrib/propagators/aws v1.1.0
+	go.opentelemetry.io/contrib/propagators/b3 v1.1.0
+	go.opentelemetry.io/contrib/propagators/jaeger v1.1.0
+	go.opentelemetry.io/contrib/propagators/ot v1.1.0
+	go.opentelemetry.io/otel v1.1.0
+	go.opentelemetry.io/otel/exporters/otlp/otlptrace v1.1.0
+	go.opentelemetry.io/otel/exporters/otlp/otlptrace/otlptracegrpc v1.1.0
+	go.opentelemetry.io/otel/sdk v1.1.0
+	go.opentelemetry.io/otel/trace v1.1.0
 	go.uber.org/zap v1.19.1
-	golang.org/x/net v0.0.0-20210614182718-04defd469f4e
-	google.golang.org/grpc v1.40.0
+	golang.org/x/net v0.0.0-20211101193420-4a448f8816b3
+	google.golang.org/grpc v1.42.0
 	gotest.tools v2.2.0+incompatible // indirect
-	k8s.io/api v0.21.4
-	k8s.io/apiextensions-apiserver v0.21.4
-	k8s.io/apimachinery v0.21.4
-	k8s.io/client-go v0.21.4
+	k8s.io/api v0.22.3
+	k8s.io/apiextensions-apiserver v0.22.3
+	k8s.io/apimachinery v0.22.3
+	k8s.io/client-go v0.22.3
 	k8s.io/klog v1.0.0
-	k8s.io/metrics v0.21.4
-	sigs.k8s.io/controller-runtime v0.9.7
+	k8s.io/metrics v0.22.3
+	sigs.k8s.io/controller-runtime v0.10.2
 )
@@ -6,7 +6,7 @@

   a. [The fission dockerhub account](https://hub.docker.com/r/fission/), if you have access, you will see Fission listed in [your organizations](https://hub.docker.com/organizations/)
   b. [Fission-charts repo](https://github.com/fission/fission-charts)
-   c. [Fission Documentation Repo](https://github.com/fission/docs.fission.io)
+   c. [Fission Documentation Repo](https://github.com/fission/fission.io)
   d. [Fission main repo](https://github.com/fission/fission)

 2. Get a Github [personal access token](https://help.github.com/articles/creating-a-personal-access-token-for-the-command-line/)
@@ -76,13 +76,13 @@ b. Changelog.md

 Before you save the release - UNCHECK the "This is a pre-release" checkbox. This mark the release as ready for consumption (If release is stable).

-## Updating [Fission Docs](https://github.com/fission/docs.fission.io)
+## Updating [Fission Docs](https://github.com/fission/fission.io)

 1. Documentation Update

 a. Merge documentation PRs that are peer reviewed and get latest master locally.

-b. In the repo fission/docs.fission.io change version in version.sh file to latest version (x.y.z) and run build.sh script
+b. In the repo fission/fission.io change version in version.sh file to latest version (x.y.z) and run build.sh script

 c. **ONLY** in the dist/x.y.z directory i.e. current version directory - replace all references from previous release to current release. Please use your IDE as there will be thousands of references.

@@ -5,6 +5,7 @@ set -x

 DIR=$(realpath $(dirname "$0"))/../
 MANIFESTDIR=$(realpath "$DIR")/manifest
+CHARTS="fission-all"

 source $(realpath "${DIR}"/test/init_tools.sh)
 doit() {
@@ -23,28 +24,33 @@ check_charts_repo() {
 }

 update_chart_version() {
+    pushd "$DIR"/charts
    local version=$1
-    sed -i "s/^version.*/version\: ${version}/" charts/fission-core/Chart.yaml
-    sed -i "s/^version.*/version\: ${version}/" charts/fission-all/Chart.yaml
-    sed -i "s/appVersion.*/appVersion\: ${version}/" charts/fission-core/Chart.yaml
-    sed -i "s/appVersion.*/appVersion\: ${version}/" charts/fission-all/Chart.yaml
-    sed -i "s/\bimageTag:.*/imageTag\: ${version}/" charts/fission-core/values.yaml
-    sed -i "s/\bimageTag:.*/imageTag\: ${version}/" charts/fission-all/values.yaml
+    for c in $CHARTS; do
+        sed -i "s/^version.*/version\: ${version}/" $c/Chart.yaml
+        sed -i "s/appVersion.*/appVersion\: ${version}/" $c/Chart.yaml
+        sed -i "s/\bimageTag:.*/imageTag\: ${version}/" $c/values.yaml
+    done
+    popd
 }

 lint_charts() {
-    helm lint charts/fission-all charts/fission-core
-    if [ $? -ne 0 ]; then
-        echo "helm lint failed"
-        exit 1
-    fi
+    pushd "$DIR"/charts
+    for c in $CHARTS; do
+        doit helm lint $c
+        if [ $? -ne 0 ]; then
+            echo "helm lint failed"
+            exit 1
+        fi
+    done
+    popd
 }

 build_charts() {
    mkdir -p "$MANIFESTDIR"/charts
    pushd "$DIR"/charts
    find . -iname *.~?~ | xargs -r rm
-    for c in fission-all fission-core; do
+    for c in $CHARTS; do
        doit helm package -u $c/
        mv ./*.tgz "$MANIFESTDIR"/charts/
    done
@@ -60,7 +66,7 @@ build_yamls() {

    releaseName=fission-$(echo "${version}" | sed 's/\./-/g')

-    for c in fission-all fission-core; do
+    for c in $CHARTS; do
        # fetch dependencies
        pushd ${c}
        doit helm dependency update
@@ -96,9 +102,10 @@ update_github_charts_repo() {
    local chartsrepo=$2

    pushd "$chartsrepo"
-    cp "$MANIFESTDIR"/charts/fission-all-"${version}".tgz .
-    cp "$MANIFESTDIR"/charts/fission-core-"${version}".tgz .
-    ./index.sh
+    for c in $CHARTS; do
+        cp "$MANIFESTDIR"/charts/$c-"${version}".tgz .
+        ./index.sh
+    done
    popd
 }

@@ -1,2 +1,2 @@
-Install Guide: https://docs.fission.io/installation/
+Install Guide: https://fission.io/docs/installation/
 Full Changelog: https://github.com/fission/fission/blob/master/CHANGELOG.md
@@ -125,6 +125,7 @@ const (
 	FUNCTION_UID              = "functionUid"
 	FUNCTION_RESOURCE_VERSION = "functionResourceVersion"
 	EXECUTOR_TYPE             = "executorType"
+	MANAGED                   = "managed"
 )

 const (
@@ -21,7 +21,6 @@ import (
 	"encoding/json"
 	"fmt"
 	"io"
-	"io/ioutil"
 	"net/http"
 	"os"
 	"os/exec"
@@ -98,7 +97,7 @@ func (builder *Builder) Handler(w http.ResponseWriter, r *http.Request) {
 	}()

 	// parse request
-	body, err := ioutil.ReadAll(r.Body)
+	body, err := io.ReadAll(r.Body)
 	if err != nil {
 		e := "error reading request body"
 		builder.logger.Error(e, zap.Error(err))
@@ -20,7 +20,7 @@ import (
 	"bytes"
 	"context"
 	"encoding/json"
-	"io/ioutil"
+	"io"
 	"net/http"
 	"strings"
 	"time"
@@ -31,7 +31,7 @@ import (
 	"go.uber.org/zap"
 	"golang.org/x/net/context/ctxhttp"

-	builder "github.com/fission/fission/pkg/builder"
+	"github.com/fission/fission/pkg/builder"
 	ferror "github.com/fission/fission/pkg/error"
 	otelUtils "github.com/fission/fission/pkg/utils/otel"
 	"github.com/fission/fission/pkg/utils/tracing"
@@ -91,7 +91,7 @@ func (c *Client) Build(ctx context.Context, req *builder.PackageBuildRequest) (*

 	defer resp.Body.Close()

-	rBody, err := ioutil.ReadAll(resp.Body)
+	rBody, err := io.ReadAll(resp.Body)
 	if err != nil {
 		logger.Error("error reading resp body", zap.Error(err))
 		return nil, err
@@ -17,6 +17,7 @@ limitations under the License.
 package buildermgr

 import (
+	"context"
 	"time"

 	"github.com/pkg/errors"
@@ -29,7 +30,7 @@ import (
 )

 // Start the buildermgr service.
-func Start(logger *zap.Logger, storageSvcUrl string, envBuilderNamespace string) error {
+func Start(ctx context.Context, logger *zap.Logger, storageSvcUrl string, envBuilderNamespace string) error {
 	bmLogger := logger.Named("builder_manager")

 	fissionClient, kubernetesClient, _, _, err := crd.MakeFissionClient()
@@ -56,6 +57,6 @@ func Start(logger *zap.Logger, storageSvcUrl string, envBuilderNamespace string)
 	pkgInformer := informerFactory.Core().V1().Packages().Informer()
 	pkgWatcher := makePackageWatcher(bmLogger, fissionClient,
 		kubernetesClient, envBuilderNamespace, storageSvcUrl, &podInformer, &pkgInformer)
-	pkgWatcher.Run()
+	pkgWatcher.Run(ctx)
 	return nil
 }
@@ -322,11 +322,10 @@ func (pkgw *packageWatcher) packageInformerHandler() k8sCache.ResourceEventHandl
 	}
 }

-func (pkgw *packageWatcher) Run() {
-	context := context.Background()
-	go (*pkgw.podInformer).Run(context.Done())
+func (pkgw *packageWatcher) Run(ctx context.Context) {
+	go (*pkgw.podInformer).Run(ctx.Done())
 	(*pkgw.pkgInformer).AddEventHandler(pkgw.packageInformerHandler())
-	(*pkgw.pkgInformer).Run(context.Done())
+	(*pkgw.pkgInformer).Run(ctx.Done())
 }

 // setInitialBuildStatus sets initial build status to a package if it is empty.
@@ -131,20 +131,20 @@ func (api *API) extractQueryParamFromRequest(r *http.Request, queryParam string)
 }

 // check if namespace exists, if not create it.
-func (api *API) createNsIfNotExists(ns string) error {
+func (api *API) createNsIfNotExists(ctx context.Context, ns string) error {
 	if ns == metav1.NamespaceDefault {
 		// we don't have to create default ns
 		return nil
 	}

-	_, err := api.kubernetesClient.CoreV1().Namespaces().Get(context.TODO(), ns, metav1.GetOptions{})
+	_, err := api.kubernetesClient.CoreV1().Namespaces().Get(ctx, ns, metav1.GetOptions{})
 	if err != nil && kerrors.IsNotFound(err) {
 		ns := &apiv1.Namespace{
 			ObjectMeta: metav1.ObjectMeta{
 				Name: ns,
 			},
 		}
-		_, err = api.kubernetesClient.CoreV1().Namespaces().Create(context.TODO(), ns, metav1.CreateOptions{})
+		_, err = api.kubernetesClient.CoreV1().Namespaces().Create(ctx, ns, metav1.CreateOptions{})
 	}

 	return err
@@ -186,7 +186,7 @@ func (api *API) HealthHandler(w http.ResponseWriter, r *http.Request) {

 func (api *API) GetSvcName(w http.ResponseWriter, r *http.Request) {
 	appLabelSelector := "application=" + r.URL.Query().Get("application")
-	services, err := api.kubernetesClient.CoreV1().Services(podNamespace).List(context.TODO(), metav1.ListOptions{
+	services, err := api.kubernetesClient.CoreV1().Services(podNamespace).List(r.Context(), metav1.ListOptions{
 		LabelSelector: appLabelSelector,
 	})
 	if err != nil || len(services.Items) > 1 || len(services.Items) == 0 {
@@ -214,6 +214,7 @@ func (api *API) GetHandler() http.Handler {
 	r.HandleFunc("/v2/functions/{function}", api.FunctionApiGet).Methods("GET")
 	r.HandleFunc("/v2/functions/{function}", api.FunctionApiUpdate).Methods("PUT")
 	r.HandleFunc("/v2/functions/{function}", api.FunctionApiDelete).Methods("DELETE")
+	r.HandleFunc("/v2/functions/{function}/pods", api.FunctionApiPodList).Methods("GET")

 	r.HandleFunc("/v2/triggers/http", api.HTTPTriggerApiList).Methods("GET")
 	r.HandleFunc("/v2/triggers/http", api.HTTPTriggerApiCreate).Methods("POST")
@@ -226,6 +227,7 @@ func (api *API) GetHandler() http.Handler {
 	r.HandleFunc("/v2/environments/{environment}", api.EnvironmentApiGet).Methods("GET")
 	r.HandleFunc("/v2/environments/{environment}", api.EnvironmentApiUpdate).Methods("PUT")
 	r.HandleFunc("/v2/environments/{environment}", api.EnvironmentApiDelete).Methods("DELETE")
+	r.HandleFunc("/v2/environments/{environment}/pods", api.EnvironmentApiPodList).Methods("GET")

 	r.HandleFunc("/v2/watches", api.WatchApiList).Methods("GET")
 	r.HandleFunc("/v2/watches", api.WatchApiCreate).Methods("POST")
@@ -20,7 +20,7 @@ import (
 	"context"
 	"flag"
 	"fmt"
-	"io/ioutil"
+	"io"
 	"log"
 	"net/http"
 	"os"
@@ -359,7 +359,9 @@ func TestMain(m *testing.M) {
 	panicIf(err)

 	// testNS isolation for running multiple CI builds concurrently.
-	testNS = uuid.NewV4().String()
+	id, err := uuid.NewV4()
+	panicIf(err)
+	testNS = id.String()
 	_, err = kubeClient.CoreV1().Namespaces().Create(context.TODO(), &v1.Namespace{
 		ObjectMeta: metav1.ObjectMeta{
 			Name: testNS,
@@ -374,7 +376,8 @@ func TestMain(m *testing.M) {

 	panicIf(err)

-	go Start(logger, 8888, true, true)
+	ctx := context.Background()
+	go Start(ctx, logger, 8888, true, true)

 	time.Sleep(5 * time.Second)

@@ -394,7 +397,7 @@ func TestMain(m *testing.M) {
 	}
 	assert(found, "incorrect response content type")

-	_, err = ioutil.ReadAll(resp.Body)
+	_, err = io.ReadAll(resp.Body)
 	panicIf(err)

 	os.Exit(m.Run())
@@ -17,10 +17,9 @@ limitations under the License.
 package controller

 import (
-	"context"
 	"encoding/json"
 	"fmt"
-	"io/ioutil"
+	"io"
 	"net/http"

 	"github.com/emicklei/go-restful"
@@ -109,7 +108,7 @@ func (a *API) CanaryConfigApiCreate(w http.ResponseWriter, r *http.Request) {
 		return
 	}

-	body, err := ioutil.ReadAll(r.Body)
+	body, err := io.ReadAll(r.Body)
 	if err != nil {
 		a.respondWithError(w, err)
 		return
@@ -123,7 +122,7 @@ func (a *API) CanaryConfigApiCreate(w http.ResponseWriter, r *http.Request) {
 		return
 	}

-	canaryCfgNew, err := a.fissionClient.CoreV1().CanaryConfigs(canaryCfg.ObjectMeta.Namespace).Create(context.TODO(), &canaryCfg, metav1.CreateOptions{})
+	canaryCfgNew, err := a.fissionClient.CoreV1().CanaryConfigs(canaryCfg.ObjectMeta.Namespace).Create(r.Context(), &canaryCfg, metav1.CreateOptions{})
 	if err != nil {
 		a.respondWithError(w, err)
 		return
@@ -154,7 +153,7 @@ func (a *API) CanaryConfigApiGet(w http.ResponseWriter, r *http.Request) {
 		ns = metav1.NamespaceDefault
 	}

-	canaryCfg, err := a.fissionClient.CoreV1().CanaryConfigs(ns).Get(context.TODO(), name, metav1.GetOptions{})
+	canaryCfg, err := a.fissionClient.CoreV1().CanaryConfigs(ns).Get(r.Context(), name, metav1.GetOptions{})
 	if err != nil {
 		a.respondWithError(w, err)
 		return
@@ -181,7 +180,7 @@ func (a *API) CanaryConfigApiList(w http.ResponseWriter, r *http.Request) {
 		ns = metav1.NamespaceDefault
 	}

-	canaryCfgs, err := a.fissionClient.CoreV1().CanaryConfigs(ns).List(context.TODO(), metav1.ListOptions{})
+	canaryCfgs, err := a.fissionClient.CoreV1().CanaryConfigs(ns).List(r.Context(), metav1.ListOptions{})
 	if err != nil {
 		a.respondWithError(w, err)
 		return
@@ -203,7 +202,7 @@ func (a *API) CanaryConfigApiUpdate(w http.ResponseWriter, r *http.Request) {
 		return
 	}

-	body, err := ioutil.ReadAll(r.Body)
+	body, err := io.ReadAll(r.Body)
 	if err != nil {
 		a.respondWithError(w, err)
 		return
@@ -216,7 +215,7 @@ func (a *API) CanaryConfigApiUpdate(w http.ResponseWriter, r *http.Request) {
 		return
 	}

-	canayCfgNew, err := a.fissionClient.CoreV1().CanaryConfigs(c.ObjectMeta.Namespace).Update(context.TODO(), &c, metav1.UpdateOptions{})
+	canayCfgNew, err := a.fissionClient.CoreV1().CanaryConfigs(c.ObjectMeta.Namespace).Update(r.Context(), &c, metav1.UpdateOptions{})
 	if err != nil {
 		a.respondWithError(w, err)
 		return
@@ -245,7 +244,7 @@ func (a *API) CanaryConfigApiDelete(w http.ResponseWriter, r *http.Request) {
 		ns = metav1.NamespaceDefault
 	}

-	err := a.fissionClient.CoreV1().CanaryConfigs(ns).Delete(context.TODO(), name, metav1.DeleteOptions{})
+	err := a.fissionClient.CoreV1().CanaryConfigs(ns).Delete(r.Context(), name, metav1.DeleteOptions{})
 	if err != nil {
 		a.respondWithError(w, err)
 		return
@@ -20,7 +20,6 @@ import (
 	"bytes"
 	"context"
 	"io"
-	"io/ioutil"
 	"net/http"
 	"strings"

@@ -78,7 +77,7 @@ func (c *RESTClient) Delete(relativeUrl string) error {
 	defer resp.Body.Close()

 	if resp.StatusCode != 200 {
-		body, err := ioutil.ReadAll(resp.Body)
+		body, err := io.ReadAll(resp.Body)
 		if err != nil {
 			return errors.Wrap(err, "error deleting")
 		} else {
@@ -19,12 +19,13 @@ package v1
 import (
 	"encoding/json"
 	"fmt"
+	"net/url"

-	"github.com/fission/fission/pkg/controller/client/rest"
-
+	apiv1 "k8s.io/api/core/v1"
 	metav1 "k8s.io/apimachinery/pkg/apis/meta/v1"

 	fv1 "github.com/fission/fission/pkg/apis/core/v1"
+	"github.com/fission/fission/pkg/controller/client/rest"
 	"github.com/fission/fission/pkg/generator/encoder"
 	v1generator "github.com/fission/fission/pkg/generator/v1"
 )
@@ -40,6 +41,7 @@ type (
 		Update(env *fv1.Environment) (*metav1.ObjectMeta, error)
 		Delete(m *metav1.ObjectMeta) error
 		List(ns string) ([]fv1.Environment, error)
+		ListPods(m *metav1.ObjectMeta) ([]apiv1.Pod, error)
 	}

 	Environment struct {
@@ -163,3 +165,38 @@ func (c *Environment) List(ns string) ([]fv1.Environment, error) {

 	return envs, nil
 }
+
+func (c *Environment) ListPods(m *metav1.ObjectMeta) ([]apiv1.Pod, error) {
+	relativeUrl := fmt.Sprintf("environments/%s/pods", m.Name)
+
+	values := url.Values{}
+	if len(m.Labels) != 0 {
+		if envns, ok := m.Labels[fv1.ENVIRONMENT_NAMESPACE]; ok && len(envns) != 0 {
+			values.Add(fv1.ENVIRONMENT_NAMESPACE, envns)
+
+		}
+		if extype, ok := m.Labels[fv1.EXECUTOR_TYPE]; ok && len(extype) != 0 {
+			values.Add(fv1.EXECUTOR_TYPE, extype)
+		}
+	}
+
+	relativeUrl = fmt.Sprintf("%s?%s", relativeUrl, values.Encode())
+	resp, err := c.client.Get(relativeUrl)
+	if err != nil {
+		return nil, err
+	}
+	defer resp.Body.Close()
+
+	body, err := handleResponse(resp)
+	if err != nil {
+		return nil, err
+	}
+
+	pods := make([]apiv1.Pod, 0)
+	err = json.Unmarshal(body, &pods)
+	if err != nil {
+		return nil, err
+	}
+
+	return pods, nil
+}
@@ -17,6 +17,7 @@ limitations under the License.
 package fake

 import (
+	apiv1 "k8s.io/api/core/v1"
 	metav1 "k8s.io/apimachinery/pkg/apis/meta/v1"

 	fv1 "github.com/fission/fission/pkg/apis/core/v1"
@@ -50,3 +51,7 @@ func (c *FakeEnvironment) Delete(m *metav1.ObjectMeta) error {
 func (c *FakeEnvironment) List(ns string) ([]fv1.Environment, error) {
 	return nil, nil
 }
+
+func (c *FakeEnvironment) ListPods(m *metav1.ObjectMeta) ([]apiv1.Pod, error) {
+	return nil, nil
+}
--- a/Show More
+++ b/Show More
Author	SHA1	Message	Date
Sanket SudakeandGitHub	5349a59186	Update release version to 1.15.0 in charts (#2267 ) Signed-off-by: Sanket Sudake <sanketsudake@gmail.com>	2021-11-23 13:26:28 +05:30
Sanket SudakeandGitHub	9f1cc0a290	Update alpine base image to 3.14.3 and security fixes (#2266 ) * Update alpine base image to 3.14.3 * Security: Update github.com/opencontainers/image-spec to v1.0.2 Signed-off-by: Sanket Sudake <sanketsudake@gmail.com>	2021-11-23 10:10:07 +05:30
Sanket SudakeandGitHub	f8fb41d6b8	Adding PULL_REQUEST_TEMPLATE.md (#2265 )	2021-11-16 12:51:08 +05:30
Sanket SudakeandGitHub	b96f8ee9a5	Update chart logo with svg image (#2264 ) Signed-off-by: Sanket Sudake <sanketsudake@gmail.com>	2021-11-12 16:56:57 +05:30
Sanket SudakeandGitHub	31f8560a65	Update changelog with v1.15.0-rc2 release (#2262 ) Signed-off-by: Sanket Sudake <sanketsudake@gmail.com>	2021-11-11 19:23:55 +05:30
Sanket SudakeandGitHub	59e876062f	Capture os signals to gracefully shutdown fission components (#2261 ) - Currently, fission components don't handle shutdown signals. So we don't get any to do the required cleanup before the fission process exits. Adding signal capture process with cancelling context so that all dependent processes stop working when the process gets term signal. - Set log level to error in otel shutdown function Signed-off-by: Sanket Sudake <sanketsudake@gmail.com>	2021-11-11 17:02:11 +05:30
Sanket SudakeandGitHub	d260f07acb	Capture fission-bundle exit logs with sync (#2260 ) Currently when any of fission component exists, we fail to sync log as logger.Sync is not called before exiting. Restructured code so that we can logger.Sync before existing from the fission bundle component execution. Signed-off-by: Sanket Sudake <sanketsudake@gmail.com>	2021-11-11 10:05:22 +05:30
Sanket SudakeandGitHub	81e247e1e8	Issue #2258 Reafctor ready pod conroller to use lister and cache sync checks (#2259 ) Reactored ready pod controller code to user lister and cache sync checks, so that we avoid querying lister if cache is not synced in choodPod function. Also, as noticied in #2258 we were initializing workqueue in goroutine which was causing nil pointer reference. We have moved it out of goroutine and kept specific parts in goroutine. Signed-off-by: Sanket Sudake <sanketsudake@gmail.com>	2021-11-10 16:00:57 +05:30
Sanket SudakeandGitHub	65e842b1c8	Pass context to functionCache functions and debug messages in pool cache (#2244 ) * Active requests count tracking with debug messages * Pass required contexts to cache functions * Fix duplicate imports Signed-off-by: Sanket Sudake <sanketsudake@gmail.com>	2021-11-10 11:11:44 +05:30
Sanket SudakeandGitHub	547e1b0d83	Add termination policy customization in helm chart (#2255 ) Currently default pod termination logs go to /dev/termination-log. With CI we need to change customize path somewhere to /var/log for exporting logs with the kind export logs command. Setting FallbackToLogsOnError as termination policy for skaffold. Signed-off-by: Sanket Sudake <sanketsudake@gmail.com>	2021-11-10 08:47:54 +05:30
Sanket SudakeandGitHub	2c1b459a5e	Remove heapster from fission chart (#2256 ) Signed-off-by: Sanket Sudake <sanketsudake@gmail.com>	2021-11-09 17:33:30 +05:30
Sanket SudakeandGitHub	adfc0fa6b8	Goreleaser Update docker manifests to publish latest images (#2257 ) Signed-off-by: Sanket Sudake <sanketsudake@gmail.com>	2021-11-09 17:23:48 +05:30
Sanket SudakeandGitHub	0a7dc70339	Add support to mention priorityClassName for Fission components (#2254 ) In Fission CI as well in a couple of scenarios, noticed Fission pods getting preempted when Function pods are getting created. As both Fission components and function pods have the same priority class fission component pods might get preempted. It to be recommended to set higher priority class for components such as Fission router, executor, controller so that Fission functioning doesn't get disrupted. Most of the Fission components work fine with restart except the executor. So user should set priorityClass for Fission executor. Signed-off-by: Sanket Sudake <sanketsudake@gmail.com>	2021-11-08 10:51:29 +05:30
Sanket SudakeandGitHub	3aaeb88bcd	Export kind logs from CI for pod restart debugging (#2252 ) Signed-off-by: Sanket Sudake <sanketsudake@gmail.com>	2021-11-06 12:45:34 +05:30
Sanket SudakeandGitHub	6f6710ede9	Run all generators with upstream 1.22 code-generator (#2251 ) Signed-off-by: Sanket Sudake <sanketsudake@gmail.com>	2021-11-06 12:23:43 +05:30
Sanket SudakeandGitHub	8b13c638b1	Upgrade all dependencies (#2250 ) Signed-off-by: Sanket Sudake <sanketsudake@gmail.com>	2021-11-03 14:57:26 +05:30
Sanket SudakeandGitHub	b08bb591be	Add 1.15.x upgrade notes in chart README (#2249 ) Signed-off-by: Sanket Sudake <sanketsudake@gmail.com>	2021-11-03 12:27:03 +05:30
Sanket SudakeandGitHub	f09d399c17	Add command to generate Fission CLI docs (#2247 ) * Add command to generate Fission CLI docs * Minor fixes identified by LanguageTool Signed-off-by: Sanket Sudake <sanketsudake@gmail.com>	2021-11-02 17:09:31 +05:30
Ankit ChawlaandGitHub	0c8a0c43c1	Changed kafka version (#2246 )	2021-11-02 15:04:14 +05:30
Sanket SudakeandGitHub	12147d9cd2	Update chart version to v1.15.0-rc2 (#2243 ) Signed-off-by: Sanket Sudake <sanketsudake@gmail.com>	2021-11-01 14:35:50 +05:30
Pradeep Lakshmi NarasimhaandGitHub	a5fb5b9901	feature: Added '--specignore' option to pass file containing specs to be ignored for fission spec commands (#2239 ) - New flag `--specignore` has been added for command fission spec [list \| validate \| apply \| destroy] - This flag is optional. - The default spec ignore file name is `.specignore`, if the flag is not used - The spec ignore file existence will be checked in the `--specdir` path - If spec ignore file is passed to the flag, with a name other than .specignore and if it does not exist in the `--specdir` path then an error will be returned. - `--specdir` will be the root path against which the patterns will be evaluated - The behaviour of the spec ignore file will be similar to .gitignore (only for yml and yaml files). For reference: http://git-scm.com/docs/gitignore	2021-10-29 13:26:42 +05:30
Sanket SudakeandGitHub	8fb311b739	Disable nats test as we deprecate Fission Nats Integration (#2241 ) We would like to deprecate Fission Nats Integration and recommend user to use Fission Keda Nats connector to handle Keda events. Signed-off-by: Sanket Sudake <sanketsudake@gmail.com>	2021-10-29 09:48:47 +05:30
Sanket SudakeandGitHub	02e16666ed	chore: Update node and Go environment images in CI (#2240 ) Signed-off-by: Sanket Sudake <sanketsudake@gmail.com>	2021-10-27 15:30:31 +05:30
Eng Zer JunandGitHub	2f4ec4b2b9	refactor: move from io/ioutil to io and os package (#2236 ) The io/ioutil package has been deprecated as of Go 1.16, see https://golang.org/doc/go1.16#ioutil. This commit replaces the existing io/ioutil functions with their new definitions in io and os packages. Signed-off-by: Eng Zer Jun <engzerjun@gmail.com>	2021-10-23 17:14:12 +05:30
Sanket SudakeandGitHub	e641246866	Improve helm chart values documentation (#2235 ) Signed-off-by: Sanket Sudake <sanketsudake@gmail.com>	2021-10-22 17:52:40 +05:30
Pradeep Lakshmi NarasimhaandGitHub	772941e02e	Adding validations for env/fn before listing pods (#2231 )	2021-10-22 13:27:28 +05:30
Dylan ArbourandGitHub	3efa3bbce9	Add NATS streaming image tag (#2234 ) Creates reproducible builds by locking NATS streaming to a specific version	2021-10-22 10:57:28 +05:30
Sanket SudakeandGitHub	178cdd42b7	Remove admin role from fission-svc service account (#2233 ) Signed-off-by: Sanket Sudake <sanketsudake@gmail.com>	2021-10-22 09:54:44 +05:30
Sanket SudakeandGitHub	3a7c139e18	Remove Fission UI manifest from chart (#2232 ) Cleaned up Fission UI manifest from chart as not supported anymore. Signed-off-by: Sanket Sudake <sanketsudake@gmail.com>	2021-10-21 15:04:25 +05:30
Sanket SudakeandGitHub	e281c21662	Chart dependency update: prometheus, fluentd, influxdb (#2227 ) - Updated prometheus chart to 14.11.0 - Fluentd image to 1.8.8 - Influxdb to 1.8 Signed-off-by: Sanket Sudake <sanketsudake@gmail.com>	2021-10-21 12:54:54 +05:30
Sanket SudakeandGitHub	9b26befcba	Allow disabling preupgrade checks flag (#2229 ) Added options to allow disabling of pre-upgrade checks, also providing options to mention image and image tag for pre-upgrade. Signed-off-by: Sanket Sudake <sanketsudake@gmail.com>	2021-10-21 09:27:12 +05:30
Sanket SudakeandGitHub	1b3833205c	refactoring: Breakdown fission-all chart into components and removed fission-core (#2224 ) * Sync a few files from fission-all to fission-core chart * Change values in fission-all chart We keep the following components by default disabled now, which were enabled by default earlier. 1. nats - Fission Nats integration 2. influxdb - Influxdb and logger component 3. prometheus - Prometheus disabled by default 4. canaryDeployment - Disabled by default This change reduces the need for a fission-core chart and we can configure values of fission-all so that it can provide the behaviour of fission-all as well as fission-core. * Remove fission-core chart * Add README in the fission-all chart * Rename clusterrolebinding fission-crd to fission-cr-admin * Add icon and sources in helm chart Signed-off-by: Sanket Sudake <sanketsudake@gmail.com>	2021-10-19 15:59:14 +05:30
Sanket SudakeandGitHub	40c9a78014	Improve namespace checks in pre-upgrade verification (#2226 ) 1. Pass context to required functions 2. Avoid function spec reference namespace check if empty 3. Log errors observed in function reference namespace checks Signed-off-by: Sanket Sudake <sanketsudake@gmail.com>	2021-10-13 12:10:09 +05:30
Sanket SudakeandGitHub	a5190dce5b	Correct slack badge (#2223 )	2021-10-11 09:52:48 +05:30
Sanket SudakeandGitHub	0ad3bea276	Correct Readme table of contents (#2221 ) Signed-off-by: Sanket Sudake <sanketsudake@gmail.com>	2021-10-10 14:36:30 +05:30
Sanket SudakeandGitHub	ea3ea80ff4	Organize badges in README (#2220 ) Signed-off-by: Sanket Sudake <sanketsudake@gmail.com>	2021-10-10 14:01:21 +05:30
Pradeep Lakshmi NarasimhaandGitHub	c9da527d37	feature: Added command to list pods managed by fission for environment/function (#2207 )	2021-10-10 10:52:42 +05:30
Sanket SudakeandGitHub	e930a2922c	chore:Add codecov coverage reporting in CI flow (#2218 ) Signed-off-by: Sanket Sudake <sanketsudake@gmail.com>	2021-10-06 17:11:12 +05:30
Sanket SudakeandGitHub	5055616101	Add security policy (#2217 ) * Add security policy * Update SECURITY.md	2021-10-06 16:06:58 +05:30
Sanket SudakeandGitHub	e4d5565f8e	security: Update go-uuid and mholt/archiver to recommended version (#2216 ) * security: Update go-uuid to recommended version * security: Update mholt/archiver dep to recommended version Signed-off-by: Sanket Sudake <sanketsudake@gmail.com>	2021-10-06 13:24:54 +05:30
Sanket SudakeandGitHub	0d319c07ae	Add important badges (#2215 )	2021-10-04 17:57:29 +05:30
Pradeep Lakshmi NarasimhaandGitHub	23f4643c6e	refactor: Replaced context.TODO() with request.Context() in API files (#2214 )	2021-10-04 12:52:50 +05:30
Sanket SudakeandGitHub	6e00aa6cf5	Update docs link to fission.io/docs (#2210 ) Signed-off-by: Sanket Sudake <sanketsudake@gmail.com>	2021-09-28 17:56:43 +05:30
Sanket SudakeandGitHub	9037d14d83	Update changelog (#2205 ) Signed-off-by: Sanket Sudake <sanketsudake@gmail.com>	2021-09-24 18:54:49 +05:30