From 86f0e6837022d81f34770fb812acb9a1adbe5a2b Mon Sep 17 00:00:00 2001
From: andyzhangx <xiazhang@microsoft.com>
Date: Thu, 14 Sep 2023 07:09:43 +0000
Subject: [PATCH] doc: cut v1.23.0 release

---
 README.md                                     |   2 +-
 charts/index.yaml                             |  72 ++--
 charts/latest/blob-csi-driver-v1.23.0.tgz     | Bin 0 -> 5861 bytes
 charts/latest/blob-csi-driver/Chart.yaml      |   4 +-
 charts/latest/blob-csi-driver/values.yaml     |   4 +-
 charts/v1.23.0/blob-csi-driver-v1.23.0.tgz    | Bin 0 -> 5860 bytes
 charts/v1.23.0/blob-csi-driver/Chart.yaml     |   5 +
 .../blob-csi-driver/templates/NOTES.txt       |   5 +
 .../blob-csi-driver/templates/_helpers.tpl    |  49 +++
 .../templates/csi-blob-controller.yaml        | 216 ++++++++++++
 .../templates/csi-blob-driver.yaml            |  14 +
 .../templates/csi-blob-node.yaml              | 316 ++++++++++++++++++
 .../templates/rbac-csi-blob-controller.yaml   | 115 +++++++
 .../templates/rbac-csi-blob-node.yaml         |  29 ++
 .../serviceaccount-csi-blob-controller.yaml   |  17 +
 .../serviceaccount-csi-blob-node.yaml         |  17 +
 charts/v1.23.0/blob-csi-driver/values.yaml    | 180 ++++++++++
 deploy/csi-blob-controller.yaml               |   2 +-
 deploy/csi-blob-node.yaml                     |   4 +-
 deploy/v1.23.0/csi-blob-controller.yaml       | 144 ++++++++
 deploy/v1.23.0/csi-blob-driver.yaml           |  12 +
 deploy/v1.23.0/csi-blob-node.yaml             | 203 +++++++++++
 deploy/v1.23.0/kustomization.yaml             |  10 +
 deploy/v1.23.0/rbac-csi-blob-controller.yaml  | 108 ++++++
 deploy/v1.23.0/rbac-csi-blob-node.yaml        |  30 ++
 docs/install-blob-csi-driver.md               |   2 +-
 docs/install-csi-driver-v1.23.0.md            |  47 +++
 27 files changed, 1571 insertions(+), 36 deletions(-)
 create mode 100644 charts/latest/blob-csi-driver-v1.23.0.tgz
 create mode 100644 charts/v1.23.0/blob-csi-driver-v1.23.0.tgz
 create mode 100644 charts/v1.23.0/blob-csi-driver/Chart.yaml
 create mode 100644 charts/v1.23.0/blob-csi-driver/templates/NOTES.txt
 create mode 100644 charts/v1.23.0/blob-csi-driver/templates/_helpers.tpl
 create mode 100644 charts/v1.23.0/blob-csi-driver/templates/csi-blob-controller.yaml
 create mode 100644 charts/v1.23.0/blob-csi-driver/templates/csi-blob-driver.yaml
 create mode 100644 charts/v1.23.0/blob-csi-driver/templates/csi-blob-node.yaml
 create mode 100644 charts/v1.23.0/blob-csi-driver/templates/rbac-csi-blob-controller.yaml
 create mode 100644 charts/v1.23.0/blob-csi-driver/templates/rbac-csi-blob-node.yaml
 create mode 100644 charts/v1.23.0/blob-csi-driver/templates/serviceaccount-csi-blob-controller.yaml
 create mode 100644 charts/v1.23.0/blob-csi-driver/templates/serviceaccount-csi-blob-node.yaml
 create mode 100644 charts/v1.23.0/blob-csi-driver/values.yaml
 create mode 100644 deploy/v1.23.0/csi-blob-controller.yaml
 create mode 100644 deploy/v1.23.0/csi-blob-driver.yaml
 create mode 100644 deploy/v1.23.0/csi-blob-node.yaml
 create mode 100644 deploy/v1.23.0/kustomization.yaml
 create mode 100644 deploy/v1.23.0/rbac-csi-blob-controller.yaml
 create mode 100644 deploy/v1.23.0/rbac-csi-blob-node.yaml
 create mode 100644 docs/install-csi-driver-v1.23.0.md

diff --git a/README.md b/README.md
index cb7c08b23..19669a415 100644
--- a/README.md
+++ b/README.md
@@ -18,9 +18,9 @@ Disclaimer: Deploying this driver manually is not an officially supported Micros
 |driver version  |Image                                                 | supported k8s version |
 |----------------|------------------------------------------------------|-----------------------|
 |master branch   |mcr.microsoft.com/k8s/csi/blob-csi:latest             | 1.21+                 |
+|v1.23.0         |mcr.microsoft.com/oss/kubernetes-csi/blob-csi:v1.23.0 | 1.21+                 |
 |v1.22.2         |mcr.microsoft.com/oss/kubernetes-csi/blob-csi:v1.22.2 | 1.21+                 |
 |v1.21.4         |mcr.microsoft.com/oss/kubernetes-csi/blob-csi:v1.21.4 | 1.21+                 |
-|v1.20.2         |mcr.microsoft.com/oss/kubernetes-csi/blob-csi:v1.20.2 | 1.21+                 |
 
 ### Driver parameters
 Please refer to `blob.csi.azure.com` [driver parameters](./docs/driver-parameters.md)
diff --git a/charts/index.yaml b/charts/index.yaml
index 3a8b25e51..493861098 100644
--- a/charts/index.yaml
+++ b/charts/index.yaml
@@ -1,9 +1,27 @@
 apiVersion: v1
 entries:
   blob-csi-driver:
+  - apiVersion: v1
+    appVersion: v1.23.0
+    created: "2023-09-14T07:08:57.809415676Z"
+    description: Azure Blob Storage CSI driver
+    digest: 57151e21e33660522f25694bd8ae985e5e17c7ffe09904ad2af4025e8bf1da72
+    name: blob-csi-driver
+    urls:
+    - https://raw.githubusercontent.com/kubernetes-sigs/blob-csi-driver/master/charts/v1.23.0/blob-csi-driver-v1.23.0.tgz
+    version: v1.23.0
+  - apiVersion: v1
+    appVersion: v1.23.0
+    created: "2023-09-14T07:08:57.79789653Z"
+    description: Azure Blob Storage CSI driver
+    digest: 760a4b7bb9e2498ac613c5bf350838884c372252912dac0e00260525f8b7b31f
+    name: blob-csi-driver
+    urls:
+    - https://raw.githubusercontent.com/kubernetes-sigs/blob-csi-driver/master/charts/latest/blob-csi-driver-v1.23.0.tgz
+    version: v1.23.0
   - apiVersion: v1
     appVersion: v1.22.2
-    created: "2023-09-11T14:09:20.980714024Z"
+    created: "2023-09-14T07:08:57.808765115Z"
     description: Azure Blob Storage CSI driver
     digest: 259e66dc12db7310fe1c51e49c964398e0a6b7d511133916dd7d25f748f0b791
     name: blob-csi-driver
@@ -12,7 +30,7 @@ entries:
     version: v1.22.2
   - apiVersion: v1
     appVersion: v1.22.1
-    created: "2023-09-11T14:09:20.980095976Z"
+    created: "2023-09-14T07:08:57.808160217Z"
     description: Azure Blob Storage CSI driver
     digest: 8329d477d55c82f97bb09fb172c5f39a1677bedc13c7410bd93b306194516438
     name: blob-csi-driver
@@ -21,7 +39,7 @@ entries:
     version: v1.22.1
   - apiVersion: v1
     appVersion: v1.21.4
-    created: "2023-09-11T14:09:20.979233732Z"
+    created: "2023-09-14T07:08:57.807519271Z"
     description: Azure Blob Storage CSI driver
     digest: e4fa13670caf6b0d3e9fefa55d100daa439cd7187dabd45318ab03c7d4b17710
     name: blob-csi-driver
@@ -30,7 +48,7 @@ entries:
     version: v1.21.4
   - apiVersion: v1
     appVersion: v1.20.3
-    created: "2023-09-11T14:09:20.978659355Z"
+    created: "2023-09-14T07:08:57.806903126Z"
     description: Azure Blob Storage CSI driver
     digest: 8c2c20547b2e0e1b39d2f2efd04c1bd778f14af5feae2bda86d722dac3c02643
     name: blob-csi-driver
@@ -39,7 +57,7 @@ entries:
     version: v1.20.3
   - apiVersion: v1
     appVersion: v1.19.5
-    created: "2023-09-11T14:09:20.977195759Z"
+    created: "2023-09-14T07:08:57.805829655Z"
     description: Azure Blob Storage CSI driver
     digest: 183c3e5cd84b709f1455cc7c84ed5bd573e8a24149fd6442d38999835b0a1711
     name: blob-csi-driver
@@ -48,7 +66,7 @@ entries:
     version: v1.19.5
   - apiVersion: v1
     appVersion: v1.18.0
-    created: "2023-09-11T14:09:20.976439984Z"
+    created: "2023-09-14T07:08:57.805158045Z"
     description: Azure Blob Storage CSI driver
     digest: 3eac15488da5be7d1e78431929f7cda35bceb1af3fe107ffbd84606e047c9204
     name: blob-csi-driver
@@ -57,7 +75,7 @@ entries:
     version: v1.18.0
   - apiVersion: v1
     appVersion: v1.17.0
-    created: "2023-09-11T14:09:20.975688552Z"
+    created: "2023-09-14T07:08:57.804454096Z"
     description: Azure Blob Storage CSI driver
     digest: 22cfa17fc5e8d771ff8edd26729266a9a8ee55c0e150df85ef15698f7fe985e9
     name: blob-csi-driver
@@ -66,7 +84,7 @@ entries:
     version: v1.17.0
   - apiVersion: v1
     appVersion: v1.16.0
-    created: "2023-09-11T14:09:20.974540035Z"
+    created: "2023-09-14T07:08:57.803211425Z"
     description: Azure Blob Storage CSI driver
     digest: bf6249c0e3e3d3d009d4c79ceb7fda9a56c0565b969de753628792ea3ea5ece8
     name: blob-csi-driver
@@ -75,7 +93,7 @@ entries:
     version: v1.16.0
   - apiVersion: v1
     appVersion: v1.15.0
-    created: "2023-09-11T14:09:20.973495904Z"
+    created: "2023-09-14T07:08:57.802207457Z"
     description: Azure Blob Storage CSI driver
     digest: 8daa35cd4957695cb64b45da05a15b4020df5545a8ac44c4668dad4bba82c8a9
     name: blob-csi-driver
@@ -84,7 +102,7 @@ entries:
     version: v1.15.0
   - apiVersion: v1
     appVersion: v1.14.0
-    created: "2023-09-11T14:09:20.972723258Z"
+    created: "2023-09-14T07:08:57.801638694Z"
     description: Azure Blob Storage CSI driver
     digest: 442bc579b231aab626b9e474e2c0ed3f101d47d61c99aa9a7f863af7ce268d9d
     name: blob-csi-driver
@@ -93,7 +111,7 @@ entries:
     version: v1.14.0
   - apiVersion: v1
     appVersion: v1.13.0
-    created: "2023-09-11T14:09:20.971935206Z"
+    created: "2023-09-14T07:08:57.801044901Z"
     description: Azure Blob Storage CSI driver
     digest: b577b0b771138109aa90eb09d56fc07273ca0b584a263ee8f789e35796279f31
     name: blob-csi-driver
@@ -102,7 +120,7 @@ entries:
     version: v1.13.0
   - apiVersion: v1
     appVersion: v1.12.0
-    created: "2023-09-11T14:09:20.97118152Z"
+    created: "2023-09-14T07:08:57.800433527Z"
     description: Azure Blob Storage CSI driver
     digest: 124e87af2581b374b89a39940698620c23d3eae6dcee518d302461ffea93e9a8
     name: blob-csi-driver
@@ -111,7 +129,7 @@ entries:
     version: v1.12.0
   - apiVersion: v1
     appVersion: v1.11.0
-    created: "2023-09-11T14:09:20.970431533Z"
+    created: "2023-09-14T07:08:57.799852028Z"
     description: Azure Blob Storage CSI driver
     digest: 07c4d76017491b3d0bdd70de90e814096938bf7916da0c149c3805294bd57560
     name: blob-csi-driver
@@ -120,7 +138,7 @@ entries:
     version: v1.11.0
   - apiVersion: v1
     appVersion: v1.10.0
-    created: "2023-09-11T14:09:20.969669028Z"
+    created: "2023-09-14T07:08:57.79924594Z"
     description: Azure Blob Storage CSI driver
     digest: 79716efa958385adf57eb3570843e1b4512d8c801e8e070625e94264f3e917a9
     name: blob-csi-driver
@@ -129,7 +147,7 @@ entries:
     version: v1.10.0
   - apiVersion: v1
     appVersion: v1.9.0
-    created: "2023-09-11T14:09:20.987798089Z"
+    created: "2023-09-14T07:08:57.814768799Z"
     description: Azure Blob Storage CSI driver
     digest: fca0b9215d3277346f68c643fb3ead75158971f0d1945ab01ec559196f3cf842
     name: blob-csi-driver
@@ -138,7 +156,7 @@ entries:
     version: v1.9.0
   - apiVersion: v1
     appVersion: v1.8.0
-    created: "2023-09-11T14:09:20.986965969Z"
+    created: "2023-09-14T07:08:57.814178994Z"
     description: Azure Blob Storage CSI driver
     digest: 3b78e2ab4f33577c54d4f57276c824717d2ad2aa3741210e938fcaf927bc751f
     name: blob-csi-driver
@@ -147,7 +165,7 @@ entries:
     version: v1.8.0
   - apiVersion: v1
     appVersion: v1.7.0
-    created: "2023-09-11T14:09:20.986127062Z"
+    created: "2023-09-14T07:08:57.813560514Z"
     description: Azure Blob Storage CSI driver
     digest: 28da5b55c3d2689d6da85eb7da344385e9cb99bdb2af18c24fea93670abfe7ea
     name: blob-csi-driver
@@ -156,7 +174,7 @@ entries:
     version: v1.7.0
   - apiVersion: v1
     appVersion: v1.6.0
-    created: "2023-09-11T14:09:20.98529064Z"
+    created: "2023-09-14T07:08:57.812955839Z"
     description: Azure Blob Storage CSI driver
     digest: 6f24f2e6623f6f8862e47d4fbdf13b5f351ceec6bb9a4591ef7fc2fca9fc1eef
     name: blob-csi-driver
@@ -165,7 +183,7 @@ entries:
     version: v1.6.0
   - apiVersion: v1
     appVersion: v1.5.0
-    created: "2023-09-11T14:09:20.984331825Z"
+    created: "2023-09-14T07:08:57.812368486Z"
     description: Azure Blob Storage CSI driver
     digest: 95d14c9b70b319760d388ea47727c8c97e9287867a8852aeb67b7175b52fe8f5
     name: blob-csi-driver
@@ -174,7 +192,7 @@ entries:
     version: v1.5.0
   - apiVersion: v1
     appVersion: v1.4.1
-    created: "2023-09-11T14:09:20.982862443Z"
+    created: "2023-09-14T07:08:57.811801206Z"
     description: Azure Blob Storage CSI driver
     digest: 5fcf69c449f065fa1d5722e5a7fed8a28000efa790907e9ff4b552c5fbd16d22
     name: blob-csi-driver
@@ -183,7 +201,7 @@ entries:
     version: v1.4.1
   - apiVersion: v1
     appVersion: v1.4.0
-    created: "2023-09-11T14:09:20.982146616Z"
+    created: "2023-09-14T07:08:57.810440215Z"
     description: Azure Blob Storage CSI driver
     digest: b466543344a6411f6130ba87b093955d39ab8614c6b4ed8505a0a0c96073cb33
     name: blob-csi-driver
@@ -192,7 +210,7 @@ entries:
     version: v1.4.0
   - apiVersion: v1
     appVersion: v1.3.0
-    created: "2023-09-11T14:09:20.981430387Z"
+    created: "2023-09-14T07:08:57.809884126Z"
     description: Azure Blob Storage CSI driver
     digest: 58d02cb70a3a966b349d62e880b7149fb06ac009474e35e580784fd3c98a5b07
     name: blob-csi-driver
@@ -201,7 +219,7 @@ entries:
     version: v1.3.0
   - apiVersion: v1
     appVersion: v1.2.0
-    created: "2023-09-11T14:09:20.977808513Z"
+    created: "2023-09-14T07:08:57.806310233Z"
     description: Azure Blob Storage CSI driver
     digest: 27fb89f20b5fddc7329e6d7c2374857b22c1d61592e397a53f47121eea68c344
     name: blob-csi-driver
@@ -210,7 +228,7 @@ entries:
     version: v1.2.0
   - apiVersion: v1
     appVersion: v1.1.0
-    created: "2023-09-11T14:09:20.968859715Z"
+    created: "2023-09-14T07:08:57.798623345Z"
     description: Azure Blob Storage CSI driver
     digest: a251a55243de207c69ef53f72abee45e93b72fa4fc43dc204b7f1cdfd459acdb
     name: blob-csi-driver
@@ -219,7 +237,7 @@ entries:
     version: v1.1.0
   - apiVersion: v1
     appVersion: v1.0.0
-    created: "2023-09-11T14:09:20.968140372Z"
+    created: "2023-09-14T07:08:57.798181123Z"
     description: Azure Blob Storage CSI driver
     digest: e83f037a165eafc83a978bd7e6bf6221b052ac34363aecb12e6a73607dc58b89
     name: blob-csi-driver
@@ -228,11 +246,11 @@ entries:
     version: v1.0.0
   - apiVersion: v1
     appVersion: latest
-    created: "2023-09-11T14:09:20.967488279Z"
+    created: "2023-09-14T07:08:57.797164035Z"
     description: Azure Blob Storage CSI driver
     digest: 33f05e6b1a28a17af824be063512ae8e3ec14e6e5208c11bf0aabc8767d77346
     name: blob-csi-driver
     urls:
     - https://raw.githubusercontent.com/kubernetes-sigs/blob-csi-driver/master/charts/latest/blob-csi-driver-v0.0.0.tgz
     version: v0.0.0
-generated: "2023-09-11T14:09:20.966678507Z"
+generated: "2023-09-14T07:08:57.796343443Z"
diff --git a/charts/latest/blob-csi-driver-v1.23.0.tgz b/charts/latest/blob-csi-driver-v1.23.0.tgz
new file mode 100644
index 0000000000000000000000000000000000000000..6a65e57ff68545e321ea5d5bdf22c22f62b5a532
GIT binary patch
literal 5861
zcmV<B78>aviwG0|00000|0w_~VMtOiV@ORlOnEsqVl!4SWK%V1T2nbTPgYhoO;>Dc
zVQyr3R8em|NM&qo0PH>ebK5qu{aJqnM(NG<?uC*pf25}w|KM0ks)-|OEGNBtosI`4
zR}#)7zyhFR)%E}W1^_93f%>vyr+q@F6N_BzE`Y^ivAY0oeRk`(f;b*0GvLkhDdw^<
z$ASOd&PuD*YMmS%>3>_TR`K7~!O8J=2S>-P*70HMq;>RN>)`0%`0zW_+8qnkB@z<z
z?^;i$Rczd!q~MTz1}+Gr9W*<r;V{hnY_ty>t(phI<s_8);o0vI2lUoww`e38#}h#3
zqdqdyQ=>S54l2l0ZC1qi(v9AiMJdkz8TKO(yHx<o=l{XMLF=G6|BqS+`}zMIg#>s4
zof<;7Silv8tb+oVHv-~vCfHauTo$OeKD$*=2yqCRAd>NU2Q`@x&AaFpI0Xqp$x$;A
zC=D#}B%Sr@K^Xb|kom-&cTj&kU~<So0F^a_TtSAM&4^MJz}F+D1UF18WoRBYj#rcP
z$qXn6G34wP)}xqI300L0y>{cEwVEJh9(46YyMhT3lH&~;sw&6R)Zt0>91B0L)yr2P
z$nTr<FgF!)Bf64Q&GlL2#S6wTy7h^BuAbCtuU?@m7y}3D0+I|d3W#wOFb+t7%RvhD
z_!dwkz(ZfAKs6acCrFE{P$)QzJ7_9pC_2py(+$F!9&<%gVsR&$E~8^Ii8weR^Bk8^
zi3tVXRQMc?%n3P}VF^i>&YLy;d>Hxu$Z*p^zx-Nzg&bs-w_qL*-uwg14afioP^$^x
zGvdOT>#~SS)xRzWETMxWj{v<wKdYvwzh9#m7GVP{&==zSs?DZ~hsKPfIg1)-1X6X!
z82bVc8LNlr3#R&EBtZS<h<%|AMUPR*nePMdsF8NeWL!LS1V*orVivJ68pSNc{KkEr
z&}UqCe=M{abXp9zKvd(m*e!O7Lcg#Xv}l|wPF-beDAbrzCb9aZWdeJi{>S%`oB|4&
zCu$+{&QhojdU!0O@$oJA%P?GM08<$`4myv7WI>@Gp^~8hB=)exHCKaVDkAg>-Tf#W
z9EN2ZNbz(5Gtd?jMng^*Cvtx7W1;Z_70R&EgQ=K8BH}YL1H?hFh`WHqlySMP^t+6@
z5Xy7{=-z3nNf5@Qosa_r+N^8V!Yn@nJtAT*Bm|D@M?wO3Tuvl$v9G9)z>O5NmN&SU
zXree({mH_RaT!tdQZmFNiWZX&VSy;4oH2=R=SYB*YD!}@={34@gH2Jmog=u%LFfbO
zsNV&U4th|y&%`I8ME#)EIzW%LGSFkKmYEU@VY5sPC6`J)o$LNeXLSc*rNA8h(yTRJ
zHM9t^3mv2e#4-I>LrT`zmtGL6-d)sLi2sxcIRN>E@w<hdkW(TS{o}I8_tb>)h`_f#
zcuEPRj3bYM>Q{+82!VQtQS@=tPpa3Dl2}e$F=SkJQ2Spehe!6MZwlC#(-f>-)60WT
zTr4_B|BC1({fL!3bc{ku9-bS1hCZf{zVg{b$-Lh|#~PQBWMRnJ)_cWQK%_{1Ddq#c
zHXXNGA4&X_!*3CYER-8YN(zEfwRTd=(%x!f2TvrHT1(Y5+E1iWT*$vx*WvM)sOcQ5
zIHmnZpj0d4@gvE6;Ia1ASR8Z*^A4)(m4Y)L8hH&BXbGyv6j`WhD{S@NJrPnQFJL?d
zS9VZ+z((#AyvT?8TKMD15h`K)>QtO3kg4gVwXBxZ;}=s%`fZ>3gu-X$M*)0*`I+m2
z5I+++?R!9_7Kdb#2l)OI#WPHNrJXwHU_I?}Skezb6@s@uyB$XYhMe7JsNCirYm9^n
ziG4q*uxLOEyl`dI4;n{}<GQU{+fuKcR%|y88ZA>%fc%K>FGHa3h!2A($kYr9FY5m?
z+dxw@*4&>$4@>C2UDQkHonv<jLoBBq)C{zljzgu(uSozSiG#3DHAt6a^lqSRts(G$
z2w^Or)|)qP%6j%$HDBch=Y^H+Q;Fc;=~#Th(w%y2@^xFZmBO{^9W$ZM6zd=Lj>O1a
zZ46jOT+6~(yyq+mlO5a@VDD#6BwSJ#)O3G0x}Jxy!1W%a(Fr4o)xOBcV$ImNot!b>
za0O{-RTaAsjJ>Q3wzCN+X6lN^DEU2##$$5dLG{bg$eDs4sJFWQdp7ERxLBx)dL6w&
z3w?u(!%98=fik60#6Mo6Ztv}<_pecZ@b2<8`uXf?&>y^ije1vCmsiT<Qg(B!Uo;cy
zLHfJq6B^yC)+n{<gY2N@4D+T>ZkzFwnx4~=vkvm$mS9?|DFe=D*jp$_t&#~)+3&_=
zUZG!@wzskWE9#H6!F+bsRg+yAS!T1McT3#CLXZgs4+WUwi8A_PyoeZUk5FA-s6Chj
zsy2jJ=tr@|t_e!D;}mKKsX_W(^o7W&2HT8kOrqaa@)zUM&3b7E*1kNc6#c&vg3!kj
zM00R?-5WLJy?io_Rq>z0lXk)Xdwg<ywD<o$N4ZuyXjx20>6=Ns74;zW*&MV7MSCh@
zRnw@|t{HNt;NGo3W?UN*%SgONp$}Mq+CX+{v9@)kj~s_4mh0)m18Q7>hHEVBS@ig*
zSTe{QN5re+X`LI$QZ4lOSVxYd*YCZ;%9ZN*e=`L?1TGpfd}1hQ#r$s{o*WhC|H<+3
zKK}D8<>8_EPc$PzM_UPF;)9%ra2lv?ai`Eh|7<=!)@mB8cOPQvY2$&$u3v3$=#&8s
z_we8#55|N7s%s-q!PSwIzQU0&QNv^z=&9NGY$A>d@^S{86A#cI%2K5+IyuyTlE7Gp
zsP3f5fO`6G&0FnUJCzMDhC9V-9C=ojk&Y$Y&Qp$!bGK2mGp<2WVj(9~j#2$@!ugx1
z=Nn-Dj<<~H5A8EkTB`m(byUBpZ_^kS1Weg&MzM)1CKCYTgf`f47#18A#wLGwK*`+B
zjZFhtE9qS_bxp;hGOcFWILxc~^)q~`mxQ{0<W;q%f-{!|A)|T+k@2sW;X=%%!^Ru8
zJT`ru+j+k2Nt7eueVmN^*&=7cj&PCwps<yy{DFRpn9TL+<6}*2fEr@j)M99BLM)$+
zEIaW`$_6IPYb4o!aNsY2SP;&QteN&<<ok=j+?esyqc4zsoWnGBmKp4n!(xC<5iSMY
zbR~}I1eVrAi@2QX-ip@b8}`yV_ggB}>%S#PvSnJx^7X&nY8Ti4cI(Z_@qYb(j&et+
z*Fjxv*atvmEt?RA!%#G52el;TnR<BCTuYQmDjqam9t>3Md#*C!YbahVj1NmkO;@2s
zsJv|Wi{;`EL<#kPN_3>aMF=|HoW`*1=#%$`M6wEXV!y6*rxzJE*JjklYI%iASw1lp
zlld2u&vd-@IOaInfR}YU?#EJ<RBIPKT#dxNm91kuehFwJ@gFs{gT5|#v<Q_L{IPbf
zAi0RlCmOu4kfraJG$FG9<WXnR2GTm2jDwD4=`2+H17)ce8e{}eJ=9J&%OEAb-VFJ~
z`<tb`oJ^_L?8~Gownets!cy%#@rt3#g|Y1tnE^@b<#T2RMdgxzoxzr3$T`Rt1D`j+
znCKww)vXe=tU5@8+!;Yy9?Og!yt%%qmg*w0Z18*ylDWWR1?6Qzm+i2EeYi@{ENLQ{
z!79DY8n?-C=TkHmtP60JVL#+d?LpJ$2&w&O2VF%}k^s792f4I;nea$TI2SY7pv9@J
zoATsj;<efA!+4mdSPVJn9bU7ZpH_{0(nBN7zRN1Dc%F7pJ=3|Sev+k$9v@5Zmf`NK
zf|huK9v|zb1AGB%^0Pad`E>vx%qJo%2CCcZ&g`^ZFFn-uEA~7NLY#j8!&$d`)f<ie
zVFC03d%zutQ^Qt6tl^5ZAW@RaB6)hyZVAh4xR)F|CJoL>miW{B+PDDLp?e$>=eJOt
z9=Dc3+(ul;(}R``D319#6J^_<{=_Kb!_QaX`j`YJ`d4BA=&U#ZM(*Pd&b>n>5Z6J?
zIBT>an0r?gp<yOlbd_|ZnWcHbnCSqd4rrDH#Kgo+AU(-JPK)7Q@deWH2+zDuW9G<W
zX5@^;7_h)@#sE2JXBkd9EeXRrCUbZVU6Bji?^abTL0z7;dEhM-#jYr>qbBkSp-LbP
zq#ljMggq1`0F$@kgpA8myIqs#HqCRf^vqKE&*Rxf{Fey0D%G=N3-Ql!yHfgfdhZ%C
zuQw(;74<U4vb<@SEd_f!{OhfD&a6u0;%o@}@&nWh8KLs@`yb9n{hQvPJG|@<u5Alq
zoEy5BEUkwAuVW{h$t1N?Hclip<XOhe(_}|#TfenG(lIFr6QI&kyO2I&N0ef4gm$u9
z5EU{`Dmc>FbtZY*F}_cy*sM&)Saa_-!<-r!YocFbf9MoG2ZB(}bMz|ETk`=6n3eu3
zN$A2jHfeoNQIBY`J{ySN3-3bCBy*YHLD%QQZP>`mu9b2OvL<C~UY#jpO#Fz$^^}8{
zGT$@#jcJ)m8NLVEDN-`3xuOGf+idR$C6Zvj3qGEYz-81E9dy{r!Nd#P;`KrPbqJg=
z&tAFO4E*0uSG}9_t6sM^xbB}_+`Q{w^lV1qJI;b)TlLOrOeP<3_yOiuFfIcm!xHDa
za_}6rH?+X%L|xT;mUl_URVG=p*pRG}v>UY%CHI|Xv)Yu1mo^GTZIkAjp?bY2cnJeP
zU0)AJH^ZyTfB(l$zpTYFcne6a>&prb*I{sT{x)GRFI4X@Z${k@Hy4-hZ!UVDdl&0c
zE$0hXbOZdB>IkLtP+jM(j3jpNv=XfB3d3M;@VS3=Ir!KcTx+o(o?ZV`u^$5IW=`ld
zHH$*g(S#fS6^yR#pw-snBJlQXd!}OLLPM>H(z(3bQ4zvlV(co;gz%d#a9LFE9I$su
z{kcUyET2gkX0>avVKPEdeGDGs_<32)Aa}yM;vg0Ygm<LrVn^~w$fov2xUw)Jn|I6>
zdk7`7E4L2W6R7KX*y3|BJNK?x@mjrH3FP)(wI|YAZ-23_-^}WDdk$aP-<>I@o)3;u
zU=E>?00%f{{8Z<j|NUkCRY~7}>znnI)r#q67`6Dgt^Dbog+7e(P@b<=6+dOdG$wC$
zu3k8d_rFWH4p+=Cxk>a|z-+a0*j4dL9?N>UI)b^$>aa6*s#k%P$W|-~t3r;2xK4Gz
z$0oAH%GOwJhJ%;RnfNP}HS&LA+j{#eVOHh;AH8W8^M6`z_WA$MQXI$0rThq!v){P;
z(c~^3)J%rZ`KWKs^({{Z%DegsDLz}|?qDggJH3M6BErE-4?l*?>(ep2q}hXQrQ>WF
z#^U%_BL`tvG;7}l8G}1_efY>cSe&aHs(umD+?}Ex^uj3wz_I@q(L!s?f66>~(uGjV
z=l`MlzmWg`=J?>ve*Qm4iSz$31dNVgi}XJ&9lK2YD<IrTZAAK{^+<9oVG<t~S4J_R
z6LSbVv4e_-*Nc4Q-zOZ!DJfZm+hh)wTKXb6gBC9K*@7>YEog1nOC<EgEHIuI6w4(I
zHh}cdc|JvO*ze~2Nz3yHGk_iy$*P{@fF&D@O%ezdi`%9SmU7O_%-KGhF3t5!NGoJ#
zrKjc=0c8MnBTncfzCeV~Nq<7w;&JaD+(_TjncL)L8N3D_h+?G0F}kXEA99GVlCZ>4
z;_FbPxelOQ(i;c{O!lc2CO)fgeWxhQ2$vD|o%ED_DkYiep!+?WI%}Ehd6?Dn-8}eq
z^BZ-0c9hv@>rUIePPGgr@_b1mWPGKHliX+GgsT2N-=o?eTk<Xzu4zn)%Ypz?ujIOI
z=DWJ7MyMgCS^sIJD8_<5BR)*jo~q#9uXLk!dvE(^gPV6(mxJrxplf%h)+wWeO5oU)
zWL8ROG?@B>(e>HI#m(D`%eU`7jjTcAeBWys&D{aiDBR;?@g5su36Y!6y{l3Ga<CP#
z!i_?e#ELCz@1kk#m2GS9q;c(4tsC{OZ$6&=`{r`k8|bj-&EV6=tw@&cQmUk>=sk&4
zupXUme{}ZtqIdIY*gd=Mb>D79t8md%f!OM3fU<s^NGyv5D3E3mBv&7#yQ;nd*(lY$
zkiD9sevY)p4I|Y1)Y?CHYOS7E>t>B9JhRjG+Tk&ceA_Hm`wh%%$eZO_wB1VGN&;m`
zuvOVo0>1|J&80DoV3)w+4aH*6bT~T1a(epx58bQ&=ib%LRqy@H=<@u-&G78{r!t1T
zj4jFigZp$FpA@SVXE3k0*?YGQNw5UWgHt=If_mRFyYP4&dvdF=d}hJ6G}n$RBYY+n
z8#f(2J~l%?nh+|Ql`#w(6JI5)pH|L|$Z`}}&~0^~Wh(CT`JW-5->h@H%H+>)2(vX8
z8z7y)xfF@<0u*qSc((frEa((8@lL=0;lro5y_>;hw|6r*``EKl-uC3c8hQGf=dY2W
zUyXQ4ZvMA-)?uB~0>+)T#yNq!AWc9fsarx~DNZdBS=-H`6^!ajakWJ$Bo0Ey#qJc8
zhAgvMb$_lMvsS52m|mt^LRh?QcUe~weR*=y@H?10Sl^%Qd?9k`5D(OnD$Da~y_=Vp
zcDTN$)-<PL+U7j-PdMSRk(IvP*^d1Qi~R|U5~_;TY&F*WqP9Q6u@-;Z9O1|>_Unu5
zn1Jt9$Z6p-b!7lu*%-wl1Xrsk{Z$?thx<b&U*nL;wgHFdIGnO<3uxV5aTekUHs3sa
zOFW%_thJn#1zktm+h6aDOde5?3lpW4O+J@0c6KX~`vW#Fe!#{a2d~bzNEpvD$3od$
zeA}<7t;MGPnpK{)L=crRS$e(2>7Rnf!Fujz)5bYjE|X6)?0pi|K8dPWa;^jGFTWma
zBuY8vE8SM>FEYEBATPM`lm>oruxI0>kEKz`rRPbqpi3f?tInj@q}W+n>q(B@{BCZ=
zv7;rn$M!64#X*JX@#K!WNxz4=4O^8y?B$F-=`7e118VK=$OZKm-(|{+N2R5;KaBP=
zhtW2-j8;hDTC2eN;#gWG_Q&b=<=ZIL=YRMucAcGE0>0w>-^t-g;rvhg;N;E8{`}8#
zl!D?>gWfPVQ|gQR<HLXEGe1|%hui@n4UHo?Wt{x3m-@`P!KJ5$bj{fCa^PM9r`XS4
zrm8Q#-TwR_k9?D8?jRfzedJGc&@c7+uNqTki}6c6T%7TXjpZ0<2K-h7OhDFOqq<Lo
z{#Wld)E}mw)L))5o<P^zf}p;Hb8V{TY?F;v{_LiWatz`6Sco;-xn`SS22^g*b8%~4
zqk33HZgsO<LDY)B(*`{Wq01Qe2+d9j8x4InZYP~qa~!8uo~>^Q^$4AOjY(U${MfmT
zNo{}RH@f{VxH6u#rYWP`>780?Q*ClZ_&P@tm9~jP4`r426#bQm#gcxn8oaNnYU3Mq
z{tRk%4HdCtE&C)2P4juXBB3o?Vb`lqQ>f3bos@h(w{F^vfd2)QQlTT(R!BS5M`}bW
zM{ChJNw(GVDW&+cRuw`X%k-}m9kK%n-mG8#AFQ!k3CcP${qV5&cUa20`~Rn00<vQN
ze{gtMy8q{>y}$qCS;~t2|FbRx`WVEwv;@46;?MTOx1#d17biT6vbPAsUd`{mRO|m(
z0I(5&r+9)_>HpTraY6qdzS;YKpQn@pPkBQxT?q;qm{vuybceRWhTQz(s120hrgsyq
zcP~-y@}FhZ40?xnxei&%#VU>^P`nPu25u$kEV_qP-_PBv*1t~KT>o#r6IiMLkKYvZ
vfBX1o|NZ}GDKDn~Q-gA^`S+TCU-o5R_GMq5x%^)M00960o)eXq0H^=}TRp5m

literal 0
HcmV?d00001

diff --git a/charts/latest/blob-csi-driver/Chart.yaml b/charts/latest/blob-csi-driver/Chart.yaml
index 70bc7226c..940914d35 100644
--- a/charts/latest/blob-csi-driver/Chart.yaml
+++ b/charts/latest/blob-csi-driver/Chart.yaml
@@ -1,5 +1,5 @@
 apiVersion: v1
-appVersion: latest
+appVersion: v1.23.0
 description: Azure Blob Storage CSI driver
 name: blob-csi-driver
-version: v0.0.0
+version: v1.23.0
diff --git a/charts/latest/blob-csi-driver/values.yaml b/charts/latest/blob-csi-driver/values.yaml
index 8ff043a42..c72b078af 100644
--- a/charts/latest/blob-csi-driver/values.yaml
+++ b/charts/latest/blob-csi-driver/values.yaml
@@ -1,8 +1,8 @@
 image:
   baseRepo: mcr.microsoft.com
   blob:
-    repository: /k8s/csi/blob-csi
-    tag: latest
+    repository: /oss/kubernetes-csi/blob-csi
+    tag: v1.23.0
     pullPolicy: IfNotPresent
   csiProvisioner:
     repository: /oss/kubernetes-csi/csi-provisioner
diff --git a/charts/v1.23.0/blob-csi-driver-v1.23.0.tgz b/charts/v1.23.0/blob-csi-driver-v1.23.0.tgz
new file mode 100644
index 0000000000000000000000000000000000000000..ce96847b9c8689526b43c6673dac1b72216d34cb
GIT binary patch
literal 5860
zcmV<A78~gwiwG0|00000|0w_~VMtOiV@ORlOnEsqVl!4SWK%V1T2nbTPgYhoO;>Dc
zVQyr3R8em|NM&qo0PH>ebK5qu{aJqnM(NG<?uGht?DRC_9~?_bHF0E(<)nA7)A7LM
zO2UN%SO8S4y8hqa03gLLP+wN;v`^@CVv&p81+Z8wb{F8S&u$%85Xa+W4!n6j!(28N
zIPkyQTWPggt&>-;^uMiEtN3rLeRBL=`_*x)b$rx1X}7;?wO_T5+uxzq{#d9kk&u{w
z*LpOqV&ncK1&8Dla6uUDqItW9!!Yx+(K%|gY90uelThl1XTL`r&>NrKqOoKgPXV2e
z2gpcIjp6{hs323dc@g7tH~LVPr8xiR*pEQ$R{^Y^|Lu0W)h^Eeqt~ww^ZzLd3GfuU
zHH2=lfGY@D7X>bF1jOY`u!(HAEKqNKcB`Ne;t(=HB;$)NYBC|3pQBsg6eI{GN6kc_
zG_b_ebk?f}VdVQG<`Z|(MT5zZ$q@$uRMrr31sQQRCrVWS-;9_N+%T<_p?TCeUQf~|
zbD$u^h_hSRjABwHR8=zcI*oQ~JweJm=;?`e1ydp<$6GX1RgR~r!;|Vc7Jl5Qm#;vO
z-?!;uZYtzPbS<fx>$Av<7mQJK>l61}J*m}Ryg*kl0S?p!BpG595aTFd9FPE)gB0rV
zEuct%hrY~!YBGdQkrr2>P;i)Z(M-xvbekEb8-z7I=8C4o;<ISFj84cj;^2hLb6iFx
zCKPy6;d3-HC*)*~B_v(CXx8-eQRMq$!%Y|c@@wq{a*$cxf<-)di}$cFAVVBLttNoa
zi3?}0%OWaO|GFHogf5ai0`vm?teT?!eu-jOgblDjUx@FkHk&FQnlO$QENY-JNYxz^
z><d6-q8_3znCgd-0QH+A_JuYSJw_#Gz7M>sM%poxarw{@7`;G>S;Qu29J3Jf8~1ra
zpK;y&vCwAFX))XZQH|eXx7aBP{nBR8qH(S`b(OK9P-9A&#Ojxp3G8|LAKyoE1}J2n
zsD;csOQE{x{-KP<$G70G!f>GhOl9Oa=sXgV1%-NqN`?ZE*uxUnTn&<`h|ml4`A6a4
zFf7|Zil+;hgSMD38garnk&AO53ymMBP==KrOvMxu5ucMeAP#~>+yx|NjLS`>-(}Q=
zP^J?=_fAtyf-olSgd8ByW?i!uX89TF5fKX^A#hwj5)!!Maw3U~eMNl?Zls{KyuqDB
zQ^l$3PZoxZ%ZRF%k|7>Zw48JZ3q%>^j7fC6Kmw#xQyQyDuhE?wY>L9|0>K>)LLX39
z{VsrX(Y?ZbCO!%!>g`smjUH-cpody5GbNV7W|<mFE|q#Z*Zq~w>Mp`cfjRo6S!=v%
zXc1x;x=0O(WBRX#l&rBY{UB7myR5Sm{}~f<2=WW#pO<<<&WKp{kIN$8QxnP~0^j=J
zDJ76HjywjcUnTM&1nMD1(TDLMsa``$VmWceh;i9PoqwGiy|OQTGr+!_rC^<!ULJhn
zV$ntVS41!A2dw0wYZOxQ@Z9h-@-c<<mCvS1=KU@@*0_u$3q#Jf-YdQWB1Q5`F(2r)
z>A2PUK;owyev3e4q1-T1QV^7?b&^_^_Er;XKayB#EmhO#Jd#FnA^%!khbI%FrgN;~
zl=dHkQmu@~k0kSf$J$q8anNU2bWvTe6rB0c$ZM!TOHe(g$U;?HVXOD=h>#+A0h0;1
zvWx0NHg;#=MLyIw!XHnLPzmE#r{X+<OieGXWwoRpKbu0*ZwJ&T6h1LO3gA5~&RiFS
z_?gJrzym6^I3$xiz;_=ho@3%G?bJo>&9uu=Nk0Hp2;TVYb`l8~adwxXa+`asF%l{y
z_Wh*7vH>aZ(v?wfH(oW4>$YkgOTA87vD0WbTBf1^`2pWuhCtsEABItosTmYr)c<9+
zfu?4xxj%*;me6~%te4O`$L<V9SkAhr8E7*dhf0@UlK{pN2jPHfkRHkC-9Xt|Bj5oM
z!dO17*RNlf_3V>szRC^GGb`K262ZUIiTHx0JM-A|>$Yeog=^J2W<s4Q)<5VSiIKb7
z1h9;_mW7FU$5|96JGd*r-p`y!xTG$q>Hc<ny$E56>m5j=6UGv&eUXvHnz3=aIb*)z
z3ewQ3Ds~|lds!K5XH!tj)D@3W@_QUjCgiS*>X+lOGXp<RZ*~25Y}|W)u~ZfHI(mVY
z`UV+?m3sUGWlE!nf4oG!{+o~QUZTP9?d41K^V!vKFnsqC^{=ijuawE9?B-a%XeQKy
z^molCG`dr*QEJl%*+tDc=1rg6HsdEXJ*OpSUF5+n!L(LW2At2Zw^Wc?B@>`>(2L2u
zK)*0;Z)5*gG?-|E`RuHxCc84S%w|RJmbin3AX5q+3NXb}W%R{(5i!;tp}M|MdoT%9
zZ3wZ@k7A2m6O?MlDbx;9gA97;3z0JowjI@&#Gt3-FUF;t_1q4uLwQsw`hO(^p^qhq
z=J4{mKW@l7`DhyJ;y*_xor3@O_~f{A@c%wVxmG%8RZK_en`yii^&s@w0<;H3dn#g8
z)2P+18FFXfeqMvjxHcq~k$8zhAFu$mf$Y{|ZR<)OISx%M*VFrZ)VKl-*I3%K=;1-J
zWRN+Ih*!tcIyaD|TIk`SjvPm?-v@=2E7kM=W(Ix;Tr_0($WYLl`QJG@c~zMIC&#Z2
z@t-Ft_xH_zqB#k=+De!ZALJs0(?E5LJA*FzXY=8qR?}epyAV@P8xJ&g{c3wdrwnMg
z`+Em@Fd-CBT^oT4u8y4a6^?v~8Yas?PtC?B6LD0Kmvi8pc!2&;mMV48$&vn(1jaf<
zbtgpz)YE@!-fHLCscd*L+$mP$$g{GHbS&X^k#cODyN#NiaSf6Z3pt^3g6e-0&fi2m
z-vIM>yk$gxXrGzVQuY6-qxwyKm&ULlV9IVYicM58nE)6kw84hMu;8dLHu?QMO6GQM
zY#PW~N$--WYbq9%X*J8nVP3_rpW#!zB-HgIuc|c_oVhFr8Pz+8jDNih7h*0QHrcx6
zvFYpFF7j<pq8thDlVs%2mN^r4gv;~?g{@TO5A<8aWUf~q9%^a>)DW|#7DHPTV)<-j
z*@<UTHZWmcBgy`Q1Ahg?l5lQh&9o0A-(LpiCXA;ZeSz%b9Hz0e%wVS+76WXGa4G1f
zD{)Mxu(BRn#^qG^R<tJHu;<pf-%_bw|1Ck19n(Tqum7D^r?~!iTCY!z4(tC@l+T2E
zUDVTteE?L}vI${03`KL^t|c+g)Wf6ZTB1x+@u2bYV4z~(bCn5SL-A^1d{{bax(+Qu
z<z>TPE*F0wN~i}^qE`xBgrMWiX$;GbK6!6QB&$$2_UlS_c9CIoV@7SPmRGox<r7me
znSU|)Ovh`FV~&$8c-ge$ek@f<wRX|N)kxf1**eDKmw+}B|4~yr=<AY4%TS5IA8Y3d
zlFP_^qQMIbS^9oO6EX`x9(5*dAgz<hIOtlI&O)_6P?l<;K}G=8L+y043{v9j&5%#L
zzggO=$&`A{zD%lOTV#tZEY;2vuNb;q7~3w98IZJIK4)fFR4)0~8Eh$roP&Hh@OcxA
zi7wJ!-6}!Ls)IDhoe`wfvCP=Po9mlusV)-B2G2JjnF~BtP+lc;*$yk%hwB8*k|vTF
ztkT=8ahnWxK1E~6x&T)h_9M>J9yEQ9klK%S(N#nx37}_okSp7l36G?Nb1{=GTAbRt
zDNjx&UYpH6jE8xK#fXF6;Wg{|Y1POlJv7qnyR6cR=V=$!Go5SdCs~^4;i2?y74Ggj
zXo;uj;h}Ciz!$I~Kl`JZUk4Dvd@8bHpt`;8%uhS@(nD>(V$b6s#Oe1xob`HF{qgu8
z7C;}c2i$=;HEcb^2Chg85+$iDlBexXOITjRo#fatX>d-m#GmHZ#wD;0-Q$orzlGxT
zxU~x6HsV5_wp%u!IOgX}m2H3e6QhieK3#$9V-lF?Ux@*r^Wp#)xsN+I_YRprTo*Ot
ztkH&G?&qQijWXGy>!c&iEX@nXTn8X^K(izuCMIqI=}8W9S`7D!FOZH$c;<B)Ge;IP
zBWEnefCY9l21vV;WjN`yBn<DE%;61mMJ{l^UsbUJb$Qn2fp=6C`=Ypsn#e1JDuFbR
zdNh_3_DGZfOx}tUGA>W;c1@n!G|$D-Gb`mkk7pP0Um@VCRL_nb#6QRFTItv6y&K59
z-k9uF)XNyl@}^;S6ztvbZ?@Vw^D2>xvmxxu4^S^;gv!(Je>fixZu-OC=yEW;wk?Qp
zZs>Bdv>N)quAOWqlhjVxIFZzlXBjt7lO3sT{nq|S$D|-kfl5p5Li&guQHsG4+R1J~
zRLD4~;7DiJndE85_&%LtvoalH&Ar<Wb82L4h<=6rp;P!A2tv8Y(W^jj%?B)CR{F0b
zp-bb~r1d>UJ)-6MY#@FwybC##%w>KTU7wG3VIwcQR?0ERhLo*&b*4-(@gok`GY(?L
ze9z=Jre!8&_zq;ZNXe+?iVo0iv%MpfNP_(y_;@h}mr+l2(NQZ06EASf*X{i45IA9;
zy>hh~_`e^o`ZwoS{a$}~Jvh6#c{{l1+l<1uoCU?U>YdeuOh4f8JuI$ZQU*wdCC+!{
z;5lk<Xo1s-x~lgq?~;tGOtNONAz3A9H)<nF?z+upwJ8xVZ4`>yCe1ZN^?Fh85(a*{
zz8;NlMpu{r{*Rr0S&L=x7LZ!kmo*%2!r=D&ZNpw(sNP-PjC=2IE-v5QT=YNnFE*uG
z&KIoc2KX)25lZKwy3Sh}OYDBuO0cpk41@jQr@__b@I!xit;K$HcKuVueh8$SIib_k
zEDA+O6K?!hFuJ~j)?1Iuz}u7UnTnMQ4YeXl=kk6>MF@X|v8y-}!f(33Wl_Czz}_YG
z7Z&}ndM0I<)vm>c$p}UD33!a-r)4#R+zCGy2eC*X{7jlIb|jC4Y-(?WD+?pCeaGyu
zhfp%RcI%Kmfx4N8Ej|~sckh}Nuhq+yK<@5UdnB#R_7|J_&8%Lxr|_ly-I-zP`QR7@
z<`5bQaDa2hPj&A3-=EiCmGu3$zFALMt(b0xQHzh;%Aej@=))-Y<@st=@iQh&WAbL_
z`h~-I|9gb%aK+-1n?$cA%uXwZT@|n8v8<P?BbeK)4try#dKFlUY|WCeF63B<>r@AP
zY$98%Y>nk+IC$=yiN8|WApa+}t#`i?W?laOtJj@k{!i=mA^-nLisLxBlpkSo_8Xsn
zG`WlIn#mA49}mpAzSYS<c~@T{#b<}y9V{hwXIJoBL^ycq;m44913F=sG<&eEbet{2
zSRDUq<RA=-X6?Hm6L1%<4<DEZ%X4)j)h|MtyHnJIemH{wIQIV{T4;m$Pnidgx)5sh
z{6A9v7xMpKAGePW^ZzMIod1U*U~~*Sr2lE@*k|Hj0pU(+Bhn|W$C6_S)A+c!GKvYE
znnT!$9aKELUgRVHKH(@%Ny#GIC3CRU(r3vTv~Y3A7JRmBL2JXFBcU&5f$_YcST1R>
z0i=h{^C^O(K`-Y|TAfFj0raRyR`nzYEZJaelR&6g+%<Kulyhcg&hFWCX|88NS|K|t
zJvFxoC<CY$aYCo@1tNq_2UE(HkNbDvM*5b{+$Jx};5G0-6eBH;(N+DskVAZxge8s=
zUxy;ibpYj(-as&9azL#x@mYQAJ4InmxQwvxq^ImtDalL+-S64dS<76{!>ph0=E1j{
z->BQOr_4rMciQH4s%0pV=PME+<11C1<USK8RP_(}9@YNXl6SFiO=D7A76h1jCD&~;
z-_=buLJcv?`cErGF&6YW@nNd=R0a2br5m-^e=|56-n_lK9A5W_J-a)#P8lUs0>`c-
z^HM^i!890-ug@+nZr)s6zIpp`Yz-Rc`(Ddv?hc?v;T|80_t+3ih}?YYUyTQs!<~o~
zZWO8{R%}^kA5H75ZChtAjq9vy-MD{!^Wp5@H<zRSP=`Hlh95udM6z_3QYB4A?@^?J
z&FJ(7<Fhvx{hN=Y-r04(_hu(rg^QjF#MVaxl=b68VpS|afi#OCx%wd8b@dg<R;liV
z?9~+YQ=~O+8KFL;*8aIuYxTU^G;2)ZnV)tx4v%T%yJoT4Z(!a)-YnOm?N{p75-3Z8
zt;&uP_%*0+FO6vgy95?*D3*h!!_gs@v(xW?=v@sy^{;NO`tNSWm*?+qMrYSQl`-UH
zY(?%L+@;(2q*$#ugL%!(-urDxf+b)coZ3+p)ccOvg~yxNlRJgwGYht*xprI`;WM$=
zxasKOp&9zolu*&EjA7WA_$p!jv~q4lR-?#*?y3VVQ}K|`{{;E`W}VwtCVzfIn60_o
z0O<tIl}L;ipn$8yv)xx<L8qXJcl!Mg??1lj-wZE%{hQ(0hrW&St|tdJ$kW$6e~k?N
zYQ!sY^S`~b4x5}7Fz&Ps&I#lNX$mq)-4YT@acYUk+HMxDU{qg<t1U_)aS%E#c4we8
zWSP~f`*ZD>wMuou^fKKN!s2batGbft%afCae};vF_5I1t7b0g4@jxx9vOKRgyLowK
zhwFQ4O>-)yZO$|Qh!Y-LS?Rl-?KqsUIGnI3p{iKT)?>{tYKJ2n8}YZx5sv&~zqz<h
z2>4!woEAP)R|e3PjZrK@aJ72UU*)lJcsOM8H4d5V8gO`u!zrt_fY$95XCa<q^UcFI
z#MAl5TFY5k&~>!E{q@es<PinAFi~3B<Z~%wXTK78IAHVa2W;$d@alYvgz+qMER@aV
zxBZ&hT5RgCS>;(v1W_52rPn*0{wa7Itml5VZJd+kGWj&a!6#Aelc<U%=Q^<d{OiG1
zqLgF4(rvZ*BD0SP@{B7_Y2cR!d$vycSQ(XEd7dN-x*{^U?o5hJik+3U9_8rG@8;GV
zJ6d6T?9Sp&98{PdkM5|O^m~}QuvO{9Ud`B}&VsElpf>J~Tu^`cU8cNvR9aex!)VWQ
z7;SsYXpIzZv<hr4j-^%NaGdT?zKv3S{)gXU*V)S@;A_tRogAGM&i{1UC$C=}&i_0`
zDJUK_=nZo-rM|d7KKy4s^K->~$Q=;U&^VGa#>ww`sn47nTzP6p*NhD>2ks<riv8?m
zs`}#F-Oms5$Tx}R4#FYPNB%??{Zg<0sxf7@7{AoR<r%-&SdM|_z;89c6lDD+s{2If
zfAwxd{bBk^{pBg+33R<32<l5XH>PUNHrZ(9&u-c%#}KZMh1js28@37NK;;fS7q{jm
zs)tqN);G%)M6LLHZP23-x{Ps;(Cn13(a>k(_R?uJ$8l=q+4_c1kI?DYn6!n<kDc3?
z)b2-qquc+2E8|&fnljFv-l?TF)izgzZ*nA2X`49oP*!=5(O-#JtmyZu!TYMJHoj5k
z&!A>EP!W69vX7$BG@rLC656p9cD?#Ih5F>$Ny+z9>!$q(_+LON6*^*Lg|t_Fq(-E2
zw3eNdWLrI*Qi?xoRUzcDO#fQZA$ySE?fT{a!5X`hpll-3_xA^Xhox+~|9{LSAZzyj
z?W3d8{Xefdhx<RCq^#NhKj}iCk3oD(OTaTJ{%k*dD=I&Gal(@*dy6m})cpQSwf>I<
z02={#j3;=V{%@Te7xe$p>x2LIX-X;ZlsEL!m7tJ;X;maEcW7&D$n7tV+Cm9#dpFT$
z_Y&nU|5;Vdpm&Iu>yVXPtm9Y$#hY+!;MS7PqPt)B{oI3U{p*zN_5b!efwlVo_;o@5
ucaDz^-~WG-@@)D)H7F07|DgE~<xmdgP!8pZ%l`!c0RR6vf9!Dpr~m+!1EjD3

literal 0
HcmV?d00001

diff --git a/charts/v1.23.0/blob-csi-driver/Chart.yaml b/charts/v1.23.0/blob-csi-driver/Chart.yaml
new file mode 100644
index 000000000..940914d35
--- /dev/null
+++ b/charts/v1.23.0/blob-csi-driver/Chart.yaml
@@ -0,0 +1,5 @@
+apiVersion: v1
+appVersion: v1.23.0
+description: Azure Blob Storage CSI driver
+name: blob-csi-driver
+version: v1.23.0
diff --git a/charts/v1.23.0/blob-csi-driver/templates/NOTES.txt b/charts/v1.23.0/blob-csi-driver/templates/NOTES.txt
new file mode 100644
index 000000000..9ad135dd4
--- /dev/null
+++ b/charts/v1.23.0/blob-csi-driver/templates/NOTES.txt
@@ -0,0 +1,5 @@
+The Azure Blob Storage CSI driver is getting deployed to your cluster.
+
+To check Azure Blob Storage CSI driver pods status, please run:
+
+  kubectl --namespace={{ .Release.Namespace }} get pods --selector="release={{ .Release.Name }}" --watch
diff --git a/charts/v1.23.0/blob-csi-driver/templates/_helpers.tpl b/charts/v1.23.0/blob-csi-driver/templates/_helpers.tpl
new file mode 100644
index 000000000..d99392f32
--- /dev/null
+++ b/charts/v1.23.0/blob-csi-driver/templates/_helpers.tpl
@@ -0,0 +1,49 @@
+{{/* vim: set filetype=mustache: */}}
+
+{{/* Expand the name of the chart.*/}}
+{{- define "blob.name" -}}
+{{- default .Chart.Name .Values.nameOverride | trunc 63 | trimSuffix "-" -}}
+{{- end -}}
+
+{{/*
+Create chart name and version as used by the chart label.
+*/}}
+{{- define "blob.chart" -}}
+{{- printf "%s-%s" .Chart.Name .Chart.Version | replace "+" "_" | trunc 63 | trimSuffix "-" -}}
+{{- end -}}
+
+{{/*
+Common selectors.
+*/}}
+{{- define "blob.selectorLabels" -}}
+app.kubernetes.io/name: {{ template "blob.name" . }}
+app.kubernetes.io/instance: {{ .Release.Name }}
+{{- end -}}
+
+{{/*
+Common labels.
+*/}}
+{{- define "blob.labels" -}}
+{{- include "blob.selectorLabels" . }}
+app.kubernetes.io/component: csi-driver
+app.kubernetes.io/part-of: {{ template "blob.name" . }}
+app.kubernetes.io/managed-by: {{ .Release.Service }}
+{{- if .Chart.AppVersion }}
+app.kubernetes.io/version: {{ .Chart.AppVersion | quote }}
+{{- end }}
+helm.sh/chart: {{ template "blob.chart" . }}
+{{- if .Values.customLabels }}
+{{ toYaml .Values.customLabels }}
+{{- end }}
+{{- end -}}
+
+
+{{/* pull secrets for containers */}}
+{{- define "blob.pullSecrets" -}}
+{{- if .Values.imagePullSecrets }}
+imagePullSecrets:
+{{- range .Values.imagePullSecrets }}
+  - name: {{ . }}
+{{- end }}
+{{- end }}
+{{- end -}}
\ No newline at end of file
diff --git a/charts/v1.23.0/blob-csi-driver/templates/csi-blob-controller.yaml b/charts/v1.23.0/blob-csi-driver/templates/csi-blob-controller.yaml
new file mode 100644
index 000000000..dc11a59c2
--- /dev/null
+++ b/charts/v1.23.0/blob-csi-driver/templates/csi-blob-controller.yaml
@@ -0,0 +1,216 @@
+kind: Deployment
+apiVersion: apps/v1
+metadata:
+  name: {{ .Values.controller.name }}
+  namespace: {{ .Release.Namespace }}
+  labels:
+    app: {{ .Values.controller.name }}
+    {{- include "blob.labels" . | nindent 4 }}
+spec:
+  replicas: {{ .Values.controller.replicas }}
+  selector:
+    matchLabels:
+      app: {{ .Values.controller.name }}
+      {{- include "blob.selectorLabels" . | nindent 6 }}
+  template:
+    metadata:
+      labels:
+        app: {{ .Values.controller.name }}
+        {{- include "blob.labels" . | nindent 8 }}
+        {{- if .Values.workloadIdentity.clientID }}
+        azure.workload.identity/use: "true"
+        {{- end }}
+        {{- if .Values.podLabels }}
+{{- toYaml .Values.podLabels | nindent 8 }}
+        {{- end }}
+{{- if .Values.podAnnotations }}
+      annotations:
+{{ toYaml .Values.podAnnotations | indent 8 }}
+{{- end }}
+    spec:
+{{- with .Values.controller.affinity }}
+      affinity:
+{{ toYaml . | indent 8 }}
+{{- end }}
+      {{- if .Values.imagePullSecrets }}
+      imagePullSecrets:
+{{ toYaml .Values.imagePullSecrets | indent 8 }}
+      {{- end }}
+      hostNetwork: {{ .Values.controller.hostNetwork }}
+      serviceAccountName: {{ .Values.serviceAccount.controller }}
+      nodeSelector:
+        kubernetes.io/os: linux
+        {{- if .Values.controller.runOnMaster}}
+        node-role.kubernetes.io/master: ""
+        {{- end}}
+        {{- if .Values.controller.runOnControlPlane}}
+        node-role.kubernetes.io/control-plane: ""
+        {{- end}}
+{{- with .Values.controller.nodeSelector }}
+{{ toYaml . | indent 8 }}
+{{- end }}
+      priorityClassName: {{ .Values.priorityClassName | quote }}
+      securityContext:
+        seccompProfile:
+          type: RuntimeDefault
+{{- with .Values.controller.tolerations }}
+      tolerations:
+{{ toYaml . | indent 8 }}
+{{- end }}
+      containers:
+        - name: csi-provisioner
+{{- if hasPrefix "/" .Values.image.csiProvisioner.repository }}
+          image: "{{ .Values.image.baseRepo }}{{ .Values.image.csiProvisioner.repository }}:{{ .Values.image.csiProvisioner.tag }}"
+{{- else }}
+          image: "{{ .Values.image.csiProvisioner.repository }}:{{ .Values.image.csiProvisioner.tag }}"
+{{- end }}
+          args:
+            - "-v=2"
+            - "--csi-address=$(ADDRESS)"
+            - "--leader-election"
+            - "--leader-election-namespace={{ .Release.Namespace }}"
+            - "--timeout=120s"
+            - "--extra-create-metadata=true"
+            - "--kube-api-qps=50"
+            - "--kube-api-burst=100"
+            - "--feature-gates=HonorPVReclaimPolicy=true"
+          env:
+            - name: ADDRESS
+              value: /csi/csi.sock
+          imagePullPolicy: {{ .Values.image.csiProvisioner.pullPolicy }}
+          volumeMounts:
+            - mountPath: /csi
+              name: socket-dir
+          resources: {{- toYaml .Values.controller.resources.csiProvisioner | nindent 12 }}
+        - name: liveness-probe
+{{- if hasPrefix "/" .Values.image.livenessProbe.repository }}
+          image: "{{ .Values.image.baseRepo }}{{ .Values.image.livenessProbe.repository }}:{{ .Values.image.livenessProbe.tag }}"
+{{- else }}
+          image: "{{ .Values.image.livenessProbe.repository }}:{{ .Values.image.livenessProbe.tag }}"
+{{- end }}
+          args:
+            - --csi-address=/csi/csi.sock
+            - --probe-timeout=3s
+            - --health-port={{ .Values.controller.livenessProbe.healthPort }}
+          imagePullPolicy: {{ .Values.image.livenessProbe.pullPolicy }}
+          volumeMounts:
+            - name: socket-dir
+              mountPath: /csi
+          resources: {{- toYaml .Values.controller.resources.livenessProbe | nindent 12 }}
+        - name: blob
+{{- if hasPrefix "/" .Values.image.blob.repository }}
+          image: "{{ .Values.image.baseRepo }}{{ .Values.image.blob.repository }}:{{ .Values.image.blob.tag }}"
+{{- else }}
+          image: "{{ .Values.image.blob.repository }}:{{ .Values.image.blob.tag }}"
+{{- end }}
+          args:
+            - "--v={{ .Values.controller.logLevel }}"
+            - "--endpoint=$(CSI_ENDPOINT)"
+            - "--metrics-address=0.0.0.0:{{ .Values.controller.metricsPort }}"
+            - "--drivername={{ .Values.driver.name }}"
+            - "--custom-user-agent={{ .Values.driver.customUserAgent }}"
+            - "--user-agent-suffix={{ .Values.driver.userAgentSuffix }}"
+            - "--cloud-config-secret-name={{ .Values.controller.cloudConfigSecretName }}"
+            - "--cloud-config-secret-namespace={{ .Values.controller.cloudConfigSecretNamespace }}"
+            - "--allow-empty-cloud-config={{ .Values.controller.allowEmptyCloudConfig }}"
+          ports:
+            - containerPort: {{ .Values.controller.livenessProbe.healthPort }}
+              name: healthz
+              protocol: TCP
+            - containerPort: {{ .Values.controller.metricsPort }}
+              name: metrics
+              protocol: TCP
+          livenessProbe:
+            failureThreshold: 5
+            httpGet:
+              path: /healthz
+              port: healthz
+            initialDelaySeconds: 30
+            timeoutSeconds: 10
+            periodSeconds: 30
+          env:
+            - name: AZURE_CREDENTIAL_FILE
+              valueFrom:
+                configMapKeyRef:
+                  name: azure-cred-file
+                  key: path
+                  optional: true
+            - name: CSI_ENDPOINT
+              value: unix:///csi/csi.sock
+            {{- if ne .Values.driver.httpsProxy "" }}
+            - name: HTTPS_PROXY
+              value: {{ .Values.driver.httpsProxy }}
+            {{- end }}
+            {{- if ne .Values.driver.httpProxy "" }}
+            - name: HTTP_PROXY
+              value: {{ .Values.driver.httpProxy }}
+            {{- end }}
+            - name: AZURE_GO_SDK_LOG_LEVEL
+              value: {{ .Values.driver.azureGoSDKLogLevel }}
+            {{- if eq .Values.cloud "AzureStackCloud" }}
+            - name: AZURE_ENVIRONMENT_FILEPATH
+              value: /etc/kubernetes/azurestackcloud.json
+            {{- end }}
+          imagePullPolicy: {{ .Values.image.blob.pullPolicy }}
+          volumeMounts:
+            - mountPath: /csi
+              name: socket-dir
+            - mountPath: /etc/kubernetes/
+              name: azure-cred
+            {{- if eq .Values.cloud "AzureStackCloud" }}
+            - name: ssl
+              mountPath: /etc/ssl/certs
+              readOnly: true
+            {{- end }}
+            {{- if eq .Values.linux.distro "fedora" }}
+            - name: ssl
+              mountPath: /etc/ssl/certs
+              readOnly: true
+            - name: ssl-pki
+              mountPath: /etc/pki/ca-trust/extracted
+              readOnly: true
+            {{- end }}
+          resources: {{- toYaml .Values.controller.resources.blob | nindent 12 }}
+        - name: csi-resizer
+{{- if hasPrefix "/" .Values.image.csiResizer.repository }}
+          image: "{{ .Values.image.baseRepo }}{{ .Values.image.csiResizer.repository }}:{{ .Values.image.csiResizer.tag }}"
+{{- else }}
+          image: "{{ .Values.image.csiResizer.repository }}:{{ .Values.image.csiResizer.tag }}"
+{{- end }}
+          args:
+            - "-csi-address=$(ADDRESS)"
+            - "-v=2"
+            - "-leader-election"
+            - "--leader-election-namespace={{ .Release.Namespace }}"
+            - '-handle-volume-inuse-error=false'
+          env:
+            - name: ADDRESS
+              value: /csi/csi.sock
+          imagePullPolicy: {{ .Values.image.csiResizer.pullPolicy }}
+          volumeMounts:
+            - name: socket-dir
+              mountPath: /csi
+          resources: {{- toYaml .Values.controller.resources.csiResizer | nindent 12 }}
+      volumes:
+        - name: socket-dir
+          emptyDir: {}
+        - name: azure-cred
+          hostPath:
+            path: /etc/kubernetes/
+            type: DirectoryOrCreate
+        {{- if eq .Values.cloud "AzureStackCloud" }}
+        - name: ssl
+          hostPath:
+            path: /etc/ssl/certs
+        {{- end }}
+        {{- if eq .Values.linux.distro "fedora" }}
+        - name: ssl
+          hostPath:
+            path: /etc/ssl/certs
+        - name: ssl-pki
+          hostPath:
+            path: /etc/pki/ca-trust/extracted
+        {{- end }}
+      {{- if .Values.securityContext }}
+      securityContext: {{- toYaml .Values.securityContext | nindent 8 }}
+      {{- end }}
diff --git a/charts/v1.23.0/blob-csi-driver/templates/csi-blob-driver.yaml b/charts/v1.23.0/blob-csi-driver/templates/csi-blob-driver.yaml
new file mode 100644
index 000000000..9a6aea64a
--- /dev/null
+++ b/charts/v1.23.0/blob-csi-driver/templates/csi-blob-driver.yaml
@@ -0,0 +1,14 @@
+---
+apiVersion: storage.k8s.io/v1
+kind: CSIDriver
+metadata:
+  name: {{ .Values.driver.name }}
+  labels:
+    {{- include "blob.labels" . | nindent 4 }}
+spec:
+  attachRequired: false
+  podInfoOnMount: true
+  fsGroupPolicy: {{ .Values.feature.fsGroupPolicy }}
+  volumeLifecycleModes:
+    - Persistent
+    - Ephemeral
diff --git a/charts/v1.23.0/blob-csi-driver/templates/csi-blob-node.yaml b/charts/v1.23.0/blob-csi-driver/templates/csi-blob-node.yaml
new file mode 100644
index 000000000..f7b6a48f3
--- /dev/null
+++ b/charts/v1.23.0/blob-csi-driver/templates/csi-blob-node.yaml
@@ -0,0 +1,316 @@
+kind: DaemonSet
+apiVersion: apps/v1
+metadata:
+  name: {{ .Values.node.name }}
+  namespace: {{ .Release.Namespace }}
+  labels:
+    app: {{ .Values.node.name }}
+    {{- include "blob.labels" . | nindent 4 }}
+spec:
+  updateStrategy:
+    rollingUpdate:
+      maxUnavailable: {{ .Values.node.maxUnavailable }}
+    type: RollingUpdate
+  selector:
+    matchLabels:
+      app: {{ .Values.node.name }}
+      {{- include "blob.selectorLabels" . | nindent 6 }}
+  template:
+    metadata:
+      labels:
+        app: {{ .Values.node.name }}
+        {{- include "blob.labels" . | nindent 8 }}
+        {{- if .Values.workloadIdentity.clientID }}
+        azure.workload.identity/use: "true"
+        {{- end }}
+        {{- if .Values.podLabels }}
+{{- toYaml .Values.podLabels | nindent 8 }}
+        {{- end }}
+{{- if .Values.podAnnotations }}
+      annotations:
+{{ toYaml .Values.podAnnotations | indent 8 }}
+{{- end }}
+    spec:
+      {{- if .Values.imagePullSecrets }}
+      imagePullSecrets:
+{{ toYaml .Values.imagePullSecrets | indent 8 }}
+      {{- end }}
+      {{- if or .Values.node.enableBlobfuseProxy .Values.node.enableAznfsMount }}
+      hostPID: true
+      {{- end }}
+      hostNetwork: true
+      dnsPolicy: Default
+      serviceAccountName: {{ .Values.serviceAccount.node }}
+      nodeSelector:
+        kubernetes.io/os: linux
+{{- with .Values.node.nodeSelector }}
+{{ toYaml . | indent 8 }}
+{{- end }}
+      affinity:
+        nodeAffinity:
+          requiredDuringSchedulingIgnoredDuringExecution:
+            nodeSelectorTerms:
+              - matchExpressions:
+                  - key: type
+                    operator: NotIn
+                    values:
+                      - virtual-kubelet
+        {{- if .Values.node.affinity }}
+{{- toYaml .Values.node.affinity | nindent 8 }}
+        {{- end }}
+      priorityClassName: {{ .Values.priorityClassName | quote }}
+      securityContext:
+        seccompProfile:
+          type: RuntimeDefault
+{{- with .Values.node.tolerations }}
+      tolerations:
+{{ toYaml . | indent 8 }}
+{{- end }}
+{{- if .Values.node.enableBlobfuseProxy }}
+      initContainers:
+        - name: install-blobfuse-proxy
+{{- if hasPrefix "/" .Values.image.blob.repository }}
+          image: "{{ .Values.image.baseRepo }}{{ .Values.image.blob.repository }}:{{ .Values.image.blob.tag }}"
+{{- else }}
+          image: "{{ .Values.image.blob.repository }}:{{ .Values.image.blob.tag }}"
+{{- end }}
+          imagePullPolicy: IfNotPresent
+          command:
+            - "/blobfuse-proxy/init.sh"
+          securityContext:
+            privileged: true
+          env:
+            - name: DEBIAN_FRONTEND
+              value: "noninteractive"
+            - name: INSTALL_BLOBFUSE
+              value: "{{ .Values.node.blobfuseProxy.installBlobfuse }}"
+            - name: BLOBFUSE_VERSION
+              value: "{{ .Values.node.blobfuseProxy.blobfuseVersion }}"
+            - name: INSTALL_BLOBFUSE2
+              value: "{{ .Values.node.blobfuseProxy.installBlobfuse2 }}"
+            - name: BLOBFUSE2_VERSION
+              value: "{{ .Values.node.blobfuseProxy.blobfuse2Version }}"
+            - name: SET_MAX_OPEN_FILE_NUM
+              value: "{{ .Values.node.blobfuseProxy.setMaxOpenFileNum }}"
+            - name: MAX_FILE_NUM
+              value: "{{ .Values.node.blobfuseProxy.maxOpenFileNum }}"
+            - name: DISABLE_UPDATEDB
+              value: "{{ .Values.node.blobfuseProxy.disableUpdateDB }}"
+          volumeMounts:
+            - name: host-usr
+              mountPath: /host/usr
+            - name: host-etc
+              mountPath: /host/etc
+{{- end }}
+      containers:
+        - name: liveness-probe
+          imagePullPolicy: {{ .Values.image.livenessProbe.pullPolicy }}
+          volumeMounts:
+            - mountPath: /csi
+              name: socket-dir
+{{- if hasPrefix "/" .Values.image.livenessProbe.repository }}
+          image: "{{ .Values.image.baseRepo }}{{ .Values.image.livenessProbe.repository }}:{{ .Values.image.livenessProbe.tag }}"
+{{- else }}
+          image: "{{ .Values.image.livenessProbe.repository }}:{{ .Values.image.livenessProbe.tag }}"
+{{- end }}
+          args:
+            - --csi-address=/csi/csi.sock
+            - --probe-timeout=3s
+            - --health-port={{ .Values.node.livenessProbe.healthPort }}
+            - --v=2
+          resources: {{- toYaml .Values.node.resources.livenessProbe | nindent 12 }}
+        - name: node-driver-registrar
+{{- if hasPrefix "/" .Values.image.nodeDriverRegistrar.repository }}
+          image: "{{ .Values.image.baseRepo }}{{ .Values.image.nodeDriverRegistrar.repository }}:{{ .Values.image.nodeDriverRegistrar.tag }}"
+{{- else }}
+          image: "{{ .Values.image.nodeDriverRegistrar.repository }}:{{ .Values.image.nodeDriverRegistrar.tag }}"
+{{- end }}
+          args:
+            - --csi-address=$(ADDRESS)
+            - --kubelet-registration-path=$(DRIVER_REG_SOCK_PATH)
+            - --v=2
+          livenessProbe:
+            exec:
+              command:
+                - /csi-node-driver-registrar
+                - --kubelet-registration-path=$(DRIVER_REG_SOCK_PATH)
+                - --mode=kubelet-registration-probe
+            initialDelaySeconds: 30
+            timeoutSeconds: 15
+          env:
+            - name: ADDRESS
+              value: /csi/csi.sock
+            - name: DRIVER_REG_SOCK_PATH
+              value: {{ .Values.linux.kubelet }}/plugins/{{ .Values.driver.name }}/csi.sock
+          volumeMounts:
+            - name: socket-dir
+              mountPath: /csi
+            - name: registration-dir
+              mountPath: /registration
+          resources: {{- toYaml .Values.node.resources.nodeDriverRegistrar | nindent 12 }}
+        - name: blob
+{{- if hasPrefix "/" .Values.image.blob.repository }}
+          image: "{{ .Values.image.baseRepo }}{{ .Values.image.blob.repository }}:{{ .Values.image.blob.tag }}"
+{{- else }}
+          image: "{{ .Values.image.blob.repository }}:{{ .Values.image.blob.tag }}"
+{{- end }}
+          args:
+            - "--v={{ .Values.node.logLevel }}"
+            - "--endpoint=$(CSI_ENDPOINT)"
+            - "--blobfuse-proxy-endpoint=$(BLOBFUSE_PROXY_ENDPOINT)"
+            - "--enable-blobfuse-proxy={{ .Values.node.enableBlobfuseProxy }}"
+            - "--nodeid=$(KUBE_NODE_NAME)"
+            - "--drivername={{ .Values.driver.name }}"
+            - "--cloud-config-secret-name={{ .Values.node.cloudConfigSecretName }}"
+            - "--cloud-config-secret-namespace={{ .Values.node.cloudConfigSecretNamespace }}"
+            - "--custom-user-agent={{ .Values.driver.customUserAgent }}"
+            - "--user-agent-suffix={{ .Values.driver.userAgentSuffix }}"
+            - "--allow-empty-cloud-config={{ .Values.node.allowEmptyCloudConfig }}"
+            - "--enable-get-volume-stats={{ .Values.feature.enableGetVolumeStats }}"
+            - "--append-timestamp-cache-dir={{ .Values.node.appendTimeStampInCacheDir }}"
+            - "--mount-permissions={{ .Values.node.mountPermissions }}"
+            - "--allow-inline-volume-key-access-with-idenitity={{ .Values.node.allowInlineVolumeKeyAccessWithIdentity }}"
+            - "--enable-aznfs-mount={{ .Values.node.enableAznfsMount }}"
+          ports:
+            - containerPort: {{ .Values.node.livenessProbe.healthPort }}
+              name: healthz
+              protocol: TCP
+          livenessProbe:
+            failureThreshold: 5
+            httpGet:
+              path: /healthz
+              port: healthz
+            initialDelaySeconds: 30
+            timeoutSeconds: 10
+            periodSeconds: 30
+          env:
+            - name: AZURE_CREDENTIAL_FILE
+              valueFrom:
+                configMapKeyRef:
+                  name: azure-cred-file
+                  key: path
+                  optional: true
+            - name: CSI_ENDPOINT
+              value: unix:///csi/csi.sock
+            - name: BLOBFUSE_PROXY_ENDPOINT
+              value: unix:///csi/blobfuse-proxy.sock
+            {{- if ne .Values.driver.httpsProxy "" }}
+            - name: HTTPS_PROXY
+              value: {{ .Values.driver.httpsProxy }}
+            {{- end }}
+            {{- if ne .Values.driver.httpProxy "" }}
+            - name: HTTP_PROXY
+              value: {{ .Values.driver.httpProxy }}
+            {{- end }}
+            - name: KUBE_NODE_NAME
+              valueFrom:
+                fieldRef:
+                  apiVersion: v1
+                  fieldPath: spec.nodeName
+            - name: AZURE_GO_SDK_LOG_LEVEL
+              value: {{ .Values.driver.azureGoSDKLogLevel }}
+            {{- if eq .Values.cloud "AzureStackCloud" }}
+            - name: AZURE_ENVIRONMENT_FILEPATH
+              value: /etc/kubernetes/azurestackcloud.json
+            {{- end }}
+          imagePullPolicy: {{ .Values.image.blob.pullPolicy }}
+          securityContext:
+            privileged: true
+          volumeMounts:
+            - mountPath: /csi
+              name: socket-dir
+            - mountPath: {{ .Values.linux.kubelet }}/
+              mountPropagation: Bidirectional
+              name: mountpoint-dir
+            - mountPath: /etc/kubernetes/
+              name: azure-cred
+            - mountPath: /mnt
+              name: blob-cache
+            {{- if eq .Values.cloud "AzureStackCloud" }}
+            - name: ssl
+              mountPath: /etc/ssl/certs
+              readOnly: true
+            {{- end }}
+            {{- if eq .Values.linux.distro "fedora" }}
+            - name: ssl
+              mountPath: /etc/ssl/certs
+              readOnly: true
+            - name: ssl-pki
+              mountPath: /etc/pki/ca-trust/extracted
+              readOnly: true
+            {{- end }}
+            {{- if .Values.node.enableAznfsMount }}
+            - mountPath: /opt/microsoft/aznfs/data
+              name: aznfs-data
+            {{- end }}
+          resources: {{- toYaml .Values.node.resources.blob | nindent 12 }}
+{{- if .Values.node.enableAznfsMount }}
+        - name: aznfswatchdog
+{{- if hasPrefix "/" .Values.image.blob.repository }}
+          image: "{{ .Values.image.baseRepo }}{{ .Values.image.blob.repository }}:{{ .Values.image.blob.tag }}"
+{{- else }}
+          image: "{{ .Values.image.blob.repository }}:{{ .Values.image.blob.tag }}"
+{{- end }}
+          command:
+            - "aznfswatchdog"
+          imagePullPolicy: {{ .Values.image.blob.pullPolicy }}
+          securityContext:
+            privileged: true
+          resources: {{- toYaml .Values.node.resources.aznfswatchdog | nindent 12 }}
+          volumeMounts:
+            - mountPath: /opt/microsoft/aznfs/data
+              name: aznfs-data
+            - mountPath: {{ .Values.linux.kubelet }}/
+              mountPropagation: Bidirectional
+              name: mountpoint-dir
+{{- end }}
+      volumes:
+{{- if .Values.node.enableBlobfuseProxy }}
+        - name: host-usr
+          hostPath:
+            path: /usr
+        - name: host-etc
+          hostPath:
+            path: /etc
+{{- end }}
+        - hostPath:
+            path: {{ .Values.linux.kubelet }}/plugins/{{ .Values.driver.name }}
+            type: DirectoryOrCreate
+          name: socket-dir
+        - hostPath:
+            path: {{ .Values.linux.kubelet }}/
+            type: DirectoryOrCreate
+          name: mountpoint-dir
+        - hostPath:
+            path: {{ .Values.linux.kubelet }}/plugins_registry/
+            type: DirectoryOrCreate
+          name: registration-dir
+        - hostPath:
+            path: /etc/kubernetes/
+            type: DirectoryOrCreate
+          name: azure-cred
+        - hostPath:
+            path: {{ .Values.node.blobfuseCachePath }}
+          name: blob-cache
+        {{- if eq .Values.cloud "AzureStackCloud" }}
+        - name: ssl
+          hostPath:
+            path: /etc/ssl/certs
+        {{- end }}
+        {{- if eq .Values.linux.distro "fedora" }}
+        - name: ssl
+          hostPath:
+            path: /etc/ssl/certs
+        - name: ssl-pki
+          hostPath:
+            path: /etc/pki/ca-trust/extracted
+        {{- end }}
+        {{- if .Values.node.enableAznfsMount }}
+        - hostPath:
+            path: /opt/microsoft/aznfs/data
+            type: DirectoryOrCreate
+          name: aznfs-data
+        {{- end }}
+      {{- if .Values.securityContext }}
+      securityContext: {{- toYaml .Values.securityContext | nindent 8 }}
+      {{- end }}
diff --git a/charts/v1.23.0/blob-csi-driver/templates/rbac-csi-blob-controller.yaml b/charts/v1.23.0/blob-csi-driver/templates/rbac-csi-blob-controller.yaml
new file mode 100644
index 000000000..833dcc640
--- /dev/null
+++ b/charts/v1.23.0/blob-csi-driver/templates/rbac-csi-blob-controller.yaml
@@ -0,0 +1,115 @@
+{{- if .Values.rbac.create -}}
+kind: ClusterRole
+apiVersion: rbac.authorization.k8s.io/v1
+metadata:
+  name: {{ .Values.rbac.name }}-external-provisioner-role
+  labels:
+    {{- include "blob.labels" . | nindent 4 }}
+rules:
+  - apiGroups: [""]
+    resources: ["persistentvolumes"]
+    verbs: ["get", "list", "watch", "create", "delete"]
+  - apiGroups: [""]
+    resources: ["persistentvolumeclaims"]
+    verbs: ["get", "list", "watch", "update"]
+  - apiGroups: ["storage.k8s.io"]
+    resources: ["storageclasses"]
+    verbs: ["get", "list", "watch"]
+  - apiGroups: [""]
+    resources: ["events"]
+    verbs: ["get", "list", "watch", "create", "update", "patch"]
+  - apiGroups: ["storage.k8s.io"]
+    resources: ["csinodes"]
+    verbs: ["get", "list", "watch"]
+  - apiGroups: [""]
+    resources: ["nodes"]
+    verbs: ["get", "list", "watch"]
+  - apiGroups: ["coordination.k8s.io"]
+    resources: ["leases"]
+    verbs: ["get", "list", "watch", "create", "update", "patch"]
+
+---
+
+kind: ClusterRoleBinding
+apiVersion: rbac.authorization.k8s.io/v1
+metadata:
+  name: {{ .Values.rbac.name }}-csi-provisioner-binding
+  labels:
+    {{- include "blob.labels" . | nindent 4 }}
+subjects:
+  - kind: ServiceAccount
+    name: {{ .Values.serviceAccount.controller }}
+    namespace: {{ .Release.Namespace }}
+roleRef:
+  kind: ClusterRole
+  name: {{ .Values.rbac.name }}-external-provisioner-role
+  apiGroup: rbac.authorization.k8s.io
+
+---
+
+kind: ClusterRole
+apiVersion: rbac.authorization.k8s.io/v1
+metadata:
+  name: {{ .Values.rbac.name }}-external-resizer-role
+  labels:
+    {{- include "blob.labels" . | nindent 4 }}
+rules:
+  - apiGroups: [""]
+    resources: ["persistentvolumes"]
+    verbs: ["get", "list", "watch", "update", "patch"]
+  - apiGroups: [""]
+    resources: ["persistentvolumeclaims"]
+    verbs: ["get", "list", "watch"]
+  - apiGroups: [""]
+    resources: ["persistentvolumeclaims/status"]
+    verbs: ["update", "patch"]
+  - apiGroups: [""]
+    resources: ["events"]
+    verbs: ["list", "watch", "create", "update", "patch"]
+  - apiGroups: ["coordination.k8s.io"]
+    resources: ["leases"]
+    verbs: ["get", "list", "watch", "create", "update", "patch"]
+---
+kind: ClusterRoleBinding
+apiVersion: rbac.authorization.k8s.io/v1
+metadata:
+  name: {{ .Values.rbac.name }}-csi-resizer-role
+  labels:
+    {{- include "blob.labels" . | nindent 4 }}
+subjects:
+  - kind: ServiceAccount
+    name: {{ .Values.serviceAccount.controller }}
+    namespace: {{ .Release.Namespace }}
+roleRef:
+  kind: ClusterRole
+  name: {{ .Values.rbac.name }}-external-resizer-role
+  apiGroup: rbac.authorization.k8s.io
+
+---
+kind: ClusterRole
+apiVersion: rbac.authorization.k8s.io/v1
+metadata:
+  name: csi-{{ .Values.rbac.name }}-controller-secret-role
+  labels:
+    {{- include "blob.labels" . | nindent 4 }}
+rules:
+  - apiGroups: [""]
+    resources: ["secrets"]
+    verbs: ["get", "create"]
+
+---
+kind: ClusterRoleBinding
+apiVersion: rbac.authorization.k8s.io/v1
+metadata:
+  name: csi-{{ .Values.rbac.name }}-controller-secret-binding
+  labels:
+    {{- include "blob.labels" . | nindent 4 }}
+subjects:
+  - kind: ServiceAccount
+    name: {{ .Values.serviceAccount.controller }}
+    namespace: {{ .Release.Namespace }}
+roleRef:
+  kind: ClusterRole
+  name: csi-{{ .Values.rbac.name }}-controller-secret-role
+  apiGroup: rbac.authorization.k8s.io
+{{ end }}
diff --git a/charts/v1.23.0/blob-csi-driver/templates/rbac-csi-blob-node.yaml b/charts/v1.23.0/blob-csi-driver/templates/rbac-csi-blob-node.yaml
new file mode 100644
index 000000000..c041cf8db
--- /dev/null
+++ b/charts/v1.23.0/blob-csi-driver/templates/rbac-csi-blob-node.yaml
@@ -0,0 +1,29 @@
+{{- if .Values.rbac.create -}}
+---
+kind: ClusterRole
+apiVersion: rbac.authorization.k8s.io/v1
+metadata:
+  name: csi-{{ .Values.rbac.name }}-node-secret-role
+  labels:
+    {{- include "blob.labels" . | nindent 4 }}
+rules:
+  - apiGroups: [""]
+    resources: ["secrets"]
+    verbs: ["get"]
+
+---
+kind: ClusterRoleBinding
+apiVersion: rbac.authorization.k8s.io/v1
+metadata:
+  name: csi-{{ .Values.rbac.name }}-node-secret-binding
+  labels:
+    {{- include "blob.labels" . | nindent 4 }}
+subjects:
+  - kind: ServiceAccount
+    name: {{ .Values.serviceAccount.node }}
+    namespace: {{ .Release.Namespace }}
+roleRef:
+  kind: ClusterRole
+  name: csi-{{ .Values.rbac.name }}-node-secret-role
+  apiGroup: rbac.authorization.k8s.io
+{{ end }}
diff --git a/charts/v1.23.0/blob-csi-driver/templates/serviceaccount-csi-blob-controller.yaml b/charts/v1.23.0/blob-csi-driver/templates/serviceaccount-csi-blob-controller.yaml
new file mode 100644
index 000000000..7433bccf1
--- /dev/null
+++ b/charts/v1.23.0/blob-csi-driver/templates/serviceaccount-csi-blob-controller.yaml
@@ -0,0 +1,17 @@
+{{- if .Values.serviceAccount.create -}}
+apiVersion: v1
+kind: ServiceAccount
+metadata:
+  name: {{ .Values.serviceAccount.controller }}
+  namespace: {{ .Release.Namespace }}
+  labels:
+    {{- include "blob.labels" . | nindent 4 }}
+{{- if .Values.workloadIdentity.clientID }}
+    azure.workload.identity/use: "true"
+  annotations:
+    azure.workload.identity/client-id: {{ .Values.workloadIdentity.clientID }}
+{{- if .Values.workloadIdentity.tenantID }}
+    azure.workload.identity/tenant-id: {{ .Values.workloadIdentity.tenantID }}
+{{- end }}
+{{- end }}
+{{- end -}}
diff --git a/charts/v1.23.0/blob-csi-driver/templates/serviceaccount-csi-blob-node.yaml b/charts/v1.23.0/blob-csi-driver/templates/serviceaccount-csi-blob-node.yaml
new file mode 100644
index 000000000..a25090e30
--- /dev/null
+++ b/charts/v1.23.0/blob-csi-driver/templates/serviceaccount-csi-blob-node.yaml
@@ -0,0 +1,17 @@
+{{- if .Values.serviceAccount.create -}}
+apiVersion: v1
+kind: ServiceAccount
+metadata:
+  name: {{ .Values.serviceAccount.node }}
+  namespace: {{ .Release.Namespace }}
+  labels:
+    {{- include "blob.labels" . | nindent 4 }}
+{{- if .Values.workloadIdentity.clientID }}
+    azure.workload.identity/use: "true"
+  annotations:
+    azure.workload.identity/client-id: {{ .Values.workloadIdentity.clientID }}
+{{- if .Values.workloadIdentity.tenantID }}
+    azure.workload.identity/tenant-id: {{ .Values.workloadIdentity.tenantID }}
+{{- end }}
+{{- end }}
+{{- end -}}
diff --git a/charts/v1.23.0/blob-csi-driver/values.yaml b/charts/v1.23.0/blob-csi-driver/values.yaml
new file mode 100644
index 000000000..c72b078af
--- /dev/null
+++ b/charts/v1.23.0/blob-csi-driver/values.yaml
@@ -0,0 +1,180 @@
+image:
+  baseRepo: mcr.microsoft.com
+  blob:
+    repository: /oss/kubernetes-csi/blob-csi
+    tag: v1.23.0
+    pullPolicy: IfNotPresent
+  csiProvisioner:
+    repository: /oss/kubernetes-csi/csi-provisioner
+    tag: v3.5.0
+    pullPolicy: IfNotPresent
+  livenessProbe:
+    repository: /oss/kubernetes-csi/livenessprobe
+    tag: v2.10.0
+    pullPolicy: IfNotPresent
+  nodeDriverRegistrar:
+    repository: /oss/kubernetes-csi/csi-node-driver-registrar
+    tag: v2.8.0
+    pullPolicy: IfNotPresent
+  csiResizer:
+    repository: /oss/kubernetes-csi/csi-resizer
+    tag: v1.8.0
+    pullPolicy: IfNotPresent
+
+cloud: AzurePublicCloud
+
+## Reference to one or more secrets to be used when pulling images
+## ref: https://kubernetes.io/docs/tasks/configure-pod-container/pull-image-private-registry/
+imagePullSecrets: []
+# - name: myRegistryKeySecretName
+
+serviceAccount:
+  create: true # When true, service accounts will be created for you. Set to false if you want to use your own.
+  controller: csi-blob-controller-sa # Name of Service Account to be created or used
+  node: csi-blob-node-sa # Name of Service Account to be created or used
+
+rbac:
+  create: true
+  name: blob
+
+## Collection of annotations to add to all the pods
+podAnnotations: {}
+## Collection of labels to add to all the pods
+podLabels: {}
+# -- Custom labels to add into metadata
+customLabels: {}
+  # k8s-app: blob-csi-driver
+
+## Leverage a PriorityClass to ensure your pods survive resource shortages
+## ref: https://kubernetes.io/docs/concepts/configuration/pod-priority-preemption/
+priorityClassName: system-cluster-critical
+## Security context give the opportunity to run container as nonroot by setting a securityContext
+## by example :
+## securityContext: { runAsUser: 1001 }
+securityContext: {}
+
+controller:
+  name: csi-blob-controller
+  cloudConfigSecretName: azure-cloud-provider
+  cloudConfigSecretNamespace: kube-system
+  allowEmptyCloudConfig: true
+  hostNetwork: true # this setting could be disabled if controller does not depend on MSI setting
+  metricsPort: 29634
+  livenessProbe:
+    healthPort: 29632
+  replicas: 2
+  runOnMaster: false
+  runOnControlPlane: false
+  logLevel: 5
+  resources:
+    csiProvisioner:
+      limits:
+        memory: 500Mi
+      requests:
+        cpu: 10m
+        memory: 20Mi
+    livenessProbe:
+      limits:
+        memory: 100Mi
+      requests:
+        cpu: 10m
+        memory: 20Mi
+    blob:
+      limits:
+        memory: 200Mi
+      requests:
+        cpu: 10m
+        memory: 20Mi
+    csiResizer:
+      limits:
+        memory: 500Mi
+      requests:
+        cpu: 10m
+        memory: 20Mi
+  affinity: {}
+  nodeSelector: {}
+  tolerations:
+    - key: "node-role.kubernetes.io/master"
+      operator: "Exists"
+      effect: "NoSchedule"
+    - key: "node-role.kubernetes.io/controlplane"
+      operator: "Exists"
+      effect: "NoSchedule"
+    - key: "node-role.kubernetes.io/control-plane"
+      operator: "Exists"
+      effect: "NoSchedule"
+
+node:
+  name: csi-blob-node
+  cloudConfigSecretName: azure-cloud-provider
+  cloudConfigSecretNamespace: kube-system
+  allowEmptyCloudConfig: true
+  allowInlineVolumeKeyAccessWithIdentity: false
+  maxUnavailable: 1
+  livenessProbe:
+    healthPort: 29633
+  logLevel: 5
+  enableBlobfuseProxy: false
+  blobfuseProxy:
+    installBlobfuse: true
+    blobfuseVersion: "1.4.5"
+    installBlobfuse2: true
+    blobfuse2Version: "2.1.0"
+    setMaxOpenFileNum: true
+    maxOpenFileNum: "9000000"
+    disableUpdateDB: true
+  blobfuseCachePath: /mnt
+  appendTimeStampInCacheDir: false
+  mountPermissions: 0777
+  resources:
+    livenessProbe:
+      limits:
+        memory: 100Mi
+      requests:
+        cpu: 10m
+        memory: 20Mi
+    nodeDriverRegistrar:
+      limits:
+        memory: 100Mi
+      requests:
+        cpu: 10m
+        memory: 20Mi
+    blob:
+      limits:
+        memory: 2100Mi
+      requests:
+        cpu: 10m
+        memory: 20Mi
+    aznfswatchdog:
+      limits:
+        memory: 100Mi
+      requests:
+        cpu: 10m
+        memory: 20Mi
+  affinity: {}
+  nodeSelector: {}
+  tolerations:
+    - operator: "Exists"
+  enableAznfsMount: true
+
+feature:
+  fsGroupPolicy: ReadWriteOnceWithFSType
+  enableGetVolumeStats: false
+
+driver:
+  name: blob.csi.azure.com
+  customUserAgent: ""
+  userAgentSuffix: "OSS-helm"
+  azureGoSDKLogLevel: "" # available values: ""(no logs), DEBUG, INFO, WARNING, ERROR
+  httpsProxy: ""
+  httpProxy: ""
+
+linux:
+  kubelet: /var/lib/kubelet
+  distro: debian
+
+workloadIdentity:
+  clientID: ""
+  # [optional] If the AAD application or user-assigned managed identity is not in the same tenant as the cluster
+  # then set tenantID with the application or user-assigned managed identity tenant ID
+  tenantID: ""
diff --git a/deploy/csi-blob-controller.yaml b/deploy/csi-blob-controller.yaml
index 4087458f1..c5e450acc 100644
--- a/deploy/csi-blob-controller.yaml
+++ b/deploy/csi-blob-controller.yaml
@@ -73,7 +73,7 @@ spec:
               cpu: 10m
               memory: 20Mi
         - name: blob
-          image: mcr.microsoft.com/k8s/csi/blob-csi:latest
+          image: mcr.microsoft.com/oss/kubernetes-csi/blob-csi:v1.23.0
           imagePullPolicy: IfNotPresent
           args:
             - "--v=5"
diff --git a/deploy/csi-blob-node.yaml b/deploy/csi-blob-node.yaml
index 45980e300..94904b4cb 100644
--- a/deploy/csi-blob-node.yaml
+++ b/deploy/csi-blob-node.yaml
@@ -40,7 +40,7 @@ spec:
         - operator: "Exists"
       initContainers:
         - name: install-blobfuse-proxy
-          image: mcr.microsoft.com/k8s/csi/blob-csi:latest
+          image: mcr.microsoft.com/oss/kubernetes-csi/blob-csi:v1.23.0
           imagePullPolicy: IfNotPresent
           command:
             - "/blobfuse-proxy/init.sh"
@@ -118,7 +118,7 @@ spec:
               cpu: 10m
               memory: 20Mi
         - name: blob
-          image: mcr.microsoft.com/k8s/csi/blob-csi:latest
+          image: mcr.microsoft.com/oss/kubernetes-csi/blob-csi:v1.23.0
           imagePullPolicy: IfNotPresent
           args:
             - "--v=5"
diff --git a/deploy/v1.23.0/csi-blob-controller.yaml b/deploy/v1.23.0/csi-blob-controller.yaml
new file mode 100644
index 000000000..c5e450acc
--- /dev/null
+++ b/deploy/v1.23.0/csi-blob-controller.yaml
@@ -0,0 +1,144 @@
+---
+kind: Deployment
+apiVersion: apps/v1
+metadata:
+  name: csi-blob-controller
+  namespace: kube-system
+spec:
+  replicas: 2
+  selector:
+    matchLabels:
+      app: csi-blob-controller
+  template:
+    metadata:
+      labels:
+        app: csi-blob-controller
+    spec:
+      hostNetwork: true
+      serviceAccountName: csi-blob-controller-sa
+      nodeSelector:
+        kubernetes.io/os: linux  # add "kubernetes.io/role: master" to run controller on master node
+      priorityClassName: system-cluster-critical
+      securityContext:
+        seccompProfile:
+          type: RuntimeDefault
+      tolerations:
+        - key: "node-role.kubernetes.io/master"
+          operator: "Exists"
+          effect: "NoSchedule"
+        - key: "node-role.kubernetes.io/controlplane"
+          operator: "Exists"
+          effect: "NoSchedule"
+        - key: "node-role.kubernetes.io/control-plane"
+          operator: "Exists"
+          effect: "NoSchedule"
+      containers:
+        - name: csi-provisioner
+          image: mcr.microsoft.com/oss/kubernetes-csi/csi-provisioner:v3.5.0
+          args:
+            - "-v=2"
+            - "--csi-address=$(ADDRESS)"
+            - "--leader-election"
+            - "--leader-election-namespace=kube-system"
+            - "--timeout=120s"
+            - "--extra-create-metadata=true"
+            - "--kube-api-qps=50"
+            - "--kube-api-burst=100"
+            - "--feature-gates=HonorPVReclaimPolicy=true"
+          env:
+            - name: ADDRESS
+              value: /csi/csi.sock
+          volumeMounts:
+            - mountPath: /csi
+              name: socket-dir
+          resources:
+            limits:
+              memory: 500Mi
+            requests:
+              cpu: 10m
+              memory: 20Mi
+        - name: liveness-probe
+          image: mcr.microsoft.com/oss/kubernetes-csi/livenessprobe:v2.10.0
+          args:
+            - --csi-address=/csi/csi.sock
+            - --probe-timeout=3s
+            - --health-port=29632
+          volumeMounts:
+            - name: socket-dir
+              mountPath: /csi
+          resources:
+            limits:
+              memory: 100Mi
+            requests:
+              cpu: 10m
+              memory: 20Mi
+        - name: blob
+          image: mcr.microsoft.com/oss/kubernetes-csi/blob-csi:v1.23.0
+          imagePullPolicy: IfNotPresent
+          args:
+            - "--v=5"
+            - "--endpoint=$(CSI_ENDPOINT)"
+            - "--metrics-address=0.0.0.0:29634"
+            - "--user-agent-suffix=OSS-kubectl"
+          ports:
+            - containerPort: 29632
+              name: healthz
+              protocol: TCP
+            - containerPort: 29634
+              name: metrics
+              protocol: TCP
+          livenessProbe:
+            failureThreshold: 5
+            httpGet:
+              path: /healthz
+              port: healthz
+            initialDelaySeconds: 30
+            timeoutSeconds: 10
+            periodSeconds: 30
+          env:
+            - name: AZURE_CREDENTIAL_FILE
+              valueFrom:
+                configMapKeyRef:
+                  name: azure-cred-file
+                  key: path
+                  optional: true
+            - name: CSI_ENDPOINT
+              value: unix:///csi/csi.sock
+          volumeMounts:
+            - mountPath: /csi
+              name: socket-dir
+            - mountPath: /etc/kubernetes/
+              name: azure-cred
+          resources:
+            limits:
+              memory: 200Mi
+            requests:
+              cpu: 10m
+              memory: 20Mi
+        - name: csi-resizer
+          image: mcr.microsoft.com/oss/kubernetes-csi/csi-resizer:v1.8.0
+          args:
+            - "-csi-address=$(ADDRESS)"
+            - "-v=2"
+            - "-leader-election"
+            - "--leader-election-namespace=kube-system"
+            - '-handle-volume-inuse-error=false'
+          env:
+            - name: ADDRESS
+              value: /csi/csi.sock
+          volumeMounts:
+            - name: socket-dir
+              mountPath: /csi
+          resources:
+            limits:
+              memory: 500Mi
+            requests:
+              cpu: 10m
+              memory: 20Mi
+      volumes:
+        - name: socket-dir
+          emptyDir: {}
+        - name: azure-cred
+          hostPath:
+            path: /etc/kubernetes/
+            type: DirectoryOrCreate
diff --git a/deploy/v1.23.0/csi-blob-driver.yaml b/deploy/v1.23.0/csi-blob-driver.yaml
new file mode 100644
index 000000000..d2de725d8
--- /dev/null
+++ b/deploy/v1.23.0/csi-blob-driver.yaml
@@ -0,0 +1,12 @@
+---
+apiVersion: storage.k8s.io/v1
+kind: CSIDriver
+metadata:
+  name: blob.csi.azure.com
+spec:
+  attachRequired: false
+  podInfoOnMount: true
+  fsGroupPolicy: ReadWriteOnceWithFSType
+  volumeLifecycleModes:
+    - Persistent
+    - Ephemeral
diff --git a/deploy/v1.23.0/csi-blob-node.yaml b/deploy/v1.23.0/csi-blob-node.yaml
new file mode 100644
index 000000000..94904b4cb
--- /dev/null
+++ b/deploy/v1.23.0/csi-blob-node.yaml
@@ -0,0 +1,203 @@
+---
+kind: DaemonSet
+apiVersion: apps/v1
+metadata:
+  name: csi-blob-node
+  namespace: kube-system
+spec:
+  updateStrategy:
+    rollingUpdate:
+      maxUnavailable: 1
+    type: RollingUpdate
+  selector:
+    matchLabels:
+      app: csi-blob-node
+  template:
+    metadata:
+      labels:
+        app: csi-blob-node
+    spec:
+      hostNetwork: true
+      hostPID: true
+      dnsPolicy: Default
+      serviceAccountName: csi-blob-node-sa
+      nodeSelector:
+        kubernetes.io/os: linux
+      affinity:
+        nodeAffinity:
+          requiredDuringSchedulingIgnoredDuringExecution:
+            nodeSelectorTerms:
+              - matchExpressions:
+                  - key: type
+                    operator: NotIn
+                    values:
+                      - virtual-kubelet
+      priorityClassName: system-node-critical
+      securityContext:
+        seccompProfile:
+          type: RuntimeDefault
+      tolerations:
+        - operator: "Exists"
+      initContainers:
+        - name: install-blobfuse-proxy
+          image: mcr.microsoft.com/oss/kubernetes-csi/blob-csi:v1.23.0
+          imagePullPolicy: IfNotPresent
+          command:
+            - "/blobfuse-proxy/init.sh"
+          securityContext:
+            privileged: true
+          env:
+            - name: DEBIAN_FRONTEND
+              value: "noninteractive"
+            - name: INSTALL_BLOBFUSE_PROXY
+              value: "true"
+            - name: INSTALL_BLOBFUSE
+              value: "true"
+            - name: BLOBFUSE_VERSION
+              value: "1.4.5"
+            - name: INSTALL_BLOBFUSE2
+              value: "true"
+            - name: BLOBFUSE2_VERSION
+              value: "2.1.0"
+            - name: SET_MAX_OPEN_FILE_NUM
+              value: "true"
+            - name: MAX_FILE_NUM
+              value: "9000000"
+            - name: DISABLE_UPDATEDB
+              value: "true"
+          volumeMounts:
+            - name: host-usr
+              mountPath: /host/usr
+            - name: host-etc
+              mountPath: /host/etc
+      containers:
+        - name: liveness-probe
+          volumeMounts:
+            - mountPath: /csi
+              name: socket-dir
+          image: mcr.microsoft.com/oss/kubernetes-csi/livenessprobe:v2.10.0
+          args:
+            - --csi-address=/csi/csi.sock
+            - --probe-timeout=3s
+            - --health-port=29633
+            - --v=2
+          resources:
+            limits:
+              memory: 100Mi
+            requests:
+              cpu: 10m
+              memory: 20Mi
+        - name: node-driver-registrar
+          image: mcr.microsoft.com/oss/kubernetes-csi/csi-node-driver-registrar:v2.8.0
+          args:
+            - --csi-address=$(ADDRESS)
+            - --kubelet-registration-path=$(DRIVER_REG_SOCK_PATH)
+            - --v=2
+          livenessProbe:
+            exec:
+              command:
+                - /csi-node-driver-registrar
+                - --kubelet-registration-path=$(DRIVER_REG_SOCK_PATH)
+                - --mode=kubelet-registration-probe
+            initialDelaySeconds: 30
+            timeoutSeconds: 15
+          env:
+            - name: ADDRESS
+              value: /csi/csi.sock
+            - name: DRIVER_REG_SOCK_PATH
+              value: /var/lib/kubelet/plugins/blob.csi.azure.com/csi.sock
+          volumeMounts:
+            - name: socket-dir
+              mountPath: /csi
+            - name: registration-dir
+              mountPath: /registration
+          resources:
+            limits:
+              memory: 100Mi
+            requests:
+              cpu: 10m
+              memory: 20Mi
+        - name: blob
+          image: mcr.microsoft.com/oss/kubernetes-csi/blob-csi:v1.23.0
+          imagePullPolicy: IfNotPresent
+          args:
+            - "--v=5"
+            - "--endpoint=$(CSI_ENDPOINT)"
+            - "--enable-blobfuse-proxy=false"
+            - "--blobfuse-proxy-endpoint=$(BLOBFUSE_PROXY_ENDPOINT)"
+            - "--nodeid=$(KUBE_NODE_NAME)"
+            - "--user-agent-suffix=OSS-kubectl"
+          ports:
+            - containerPort: 29633
+              name: healthz
+              protocol: TCP
+          livenessProbe:
+            failureThreshold: 5
+            httpGet:
+              path: /healthz
+              port: healthz
+            initialDelaySeconds: 30
+            timeoutSeconds: 10
+            periodSeconds: 30
+          env:
+            - name: AZURE_CREDENTIAL_FILE
+              valueFrom:
+                configMapKeyRef:
+                  name: azure-cred-file
+                  key: path
+                  optional: true
+            - name: CSI_ENDPOINT
+              value: unix:///csi/csi.sock
+            - name: BLOBFUSE_PROXY_ENDPOINT
+              value: unix:///csi/blobfuse-proxy.sock
+            - name: KUBE_NODE_NAME
+              valueFrom:
+                fieldRef:
+                  apiVersion: v1
+                  fieldPath: spec.nodeName
+          securityContext:
+            privileged: true
+          volumeMounts:
+            - mountPath: /csi
+              name: socket-dir
+            - mountPath: /var/lib/kubelet/
+              mountPropagation: Bidirectional
+              name: mountpoint-dir
+            - mountPath: /etc/kubernetes/
+              name: azure-cred
+            - mountPath: /mnt
+              name: blob-cache
+          resources:
+            limits:
+              memory: 2100Mi
+            requests:
+              cpu: 10m
+              memory: 20Mi
+      volumes:
+        - name: host-usr
+          hostPath:
+            path: /usr
+        - name: host-etc
+          hostPath:
+            path: /etc
+        - hostPath:
+            path: /var/lib/kubelet/plugins/blob.csi.azure.com
+            type: DirectoryOrCreate
+          name: socket-dir
+        - hostPath:
+            path: /var/lib/kubelet/
+            type: DirectoryOrCreate
+          name: mountpoint-dir
+        - hostPath:
+            path: /var/lib/kubelet/plugins_registry/
+            type: DirectoryOrCreate
+          name: registration-dir
+        - hostPath:
+            path: /etc/kubernetes/
+            type: DirectoryOrCreate
+          name: azure-cred
+        - hostPath:
+            path: /mnt
+            type: DirectoryOrCreate
+          name: blob-cache
+---
diff --git a/deploy/v1.23.0/kustomization.yaml b/deploy/v1.23.0/kustomization.yaml
new file mode 100644
index 000000000..8b7f5fcac
--- /dev/null
+++ b/deploy/v1.23.0/kustomization.yaml
@@ -0,0 +1,10 @@
+---
+apiVersion: kustomize.config.k8s.io/v1beta1
+kind: Kustomization
+resources:
+  - csi-blob-controller.yaml
+  - csi-blob-driver.yaml
+  - csi-blob-node.yaml
+  - rbac-csi-blob-controller.yaml
+  - rbac-csi-blob-node.yaml
+  - blobfuse-proxy.yaml
diff --git a/deploy/v1.23.0/rbac-csi-blob-controller.yaml b/deploy/v1.23.0/rbac-csi-blob-controller.yaml
new file mode 100644
index 000000000..89c2f1f38
--- /dev/null
+++ b/deploy/v1.23.0/rbac-csi-blob-controller.yaml
@@ -0,0 +1,108 @@
+---
+apiVersion: v1
+kind: ServiceAccount
+metadata:
+  name: csi-blob-controller-sa
+  namespace: kube-system
+---
+
+kind: ClusterRole
+apiVersion: rbac.authorization.k8s.io/v1
+metadata:
+  name: blob-external-provisioner-role
+rules:
+  - apiGroups: [""]
+    resources: ["persistentvolumes"]
+    verbs: ["get", "list", "watch", "create", "delete"]
+  - apiGroups: [""]
+    resources: ["persistentvolumeclaims"]
+    verbs: ["get", "list", "watch", "update"]
+  - apiGroups: ["storage.k8s.io"]
+    resources: ["storageclasses"]
+    verbs: ["get", "list", "watch"]
+  - apiGroups: [""]
+    resources: ["events"]
+    verbs: ["get", "list", "watch", "create", "update", "patch"]
+  - apiGroups: ["storage.k8s.io"]
+    resources: ["csinodes"]
+    verbs: ["get", "list", "watch"]
+  - apiGroups: [""]
+    resources: ["nodes"]
+    verbs: ["get", "list", "watch"]
+  - apiGroups: ["coordination.k8s.io"]
+    resources: ["leases"]
+    verbs: ["get", "list", "watch", "create", "update", "patch"]
+---
+
+kind: ClusterRoleBinding
+apiVersion: rbac.authorization.k8s.io/v1
+metadata:
+  name: blob-csi-provisioner-binding
+subjects:
+  - kind: ServiceAccount
+    name: csi-blob-controller-sa
+    namespace: kube-system
+roleRef:
+  kind: ClusterRole
+  name: blob-external-provisioner-role
+  apiGroup: rbac.authorization.k8s.io
+---
+
+kind: ClusterRole
+apiVersion: rbac.authorization.k8s.io/v1
+metadata:
+  name: blob-external-resizer-role
+rules:
+  - apiGroups: [""]
+    resources: ["persistentvolumes"]
+    verbs: ["get", "list", "watch", "update", "patch"]
+  - apiGroups: [""]
+    resources: ["persistentvolumeclaims"]
+    verbs: ["get", "list", "watch"]
+  - apiGroups: [""]
+    resources: ["persistentvolumeclaims/status"]
+    verbs: ["update", "patch"]
+  - apiGroups: [""]
+    resources: ["events"]
+    verbs: ["list", "watch", "create", "update", "patch"]
+  - apiGroups: ["coordination.k8s.io"]
+    resources: ["leases"]
+    verbs: ["get", "list", "watch", "create", "update", "patch"]
+---
+
+kind: ClusterRoleBinding
+apiVersion: rbac.authorization.k8s.io/v1
+metadata:
+  name: blob-csi-resizer-role
+subjects:
+  - kind: ServiceAccount
+    name: csi-blob-controller-sa
+    namespace: kube-system
+roleRef:
+  kind: ClusterRole
+  name: blob-external-resizer-role
+  apiGroup: rbac.authorization.k8s.io
+---
+
+kind: ClusterRole
+apiVersion: rbac.authorization.k8s.io/v1
+metadata:
+  name: csi-blob-controller-secret-role
+rules:
+  - apiGroups: [""]
+    resources: ["secrets"]
+    verbs: ["get", "create"]
+
+---
+kind: ClusterRoleBinding
+apiVersion: rbac.authorization.k8s.io/v1
+metadata:
+  name: csi-blob-controller-secret-binding
+subjects:
+  - kind: ServiceAccount
+    name: csi-blob-controller-sa
+    namespace: kube-system
+roleRef:
+  kind: ClusterRole
+  name: csi-blob-controller-secret-role
+  apiGroup: rbac.authorization.k8s.io
diff --git a/deploy/v1.23.0/rbac-csi-blob-node.yaml b/deploy/v1.23.0/rbac-csi-blob-node.yaml
new file mode 100644
index 000000000..ce06d862c
--- /dev/null
+++ b/deploy/v1.23.0/rbac-csi-blob-node.yaml
@@ -0,0 +1,30 @@
+---
+apiVersion: v1
+kind: ServiceAccount
+metadata:
+  name: csi-blob-node-sa
+  namespace: kube-system
+
+---
+kind: ClusterRole
+apiVersion: rbac.authorization.k8s.io/v1
+metadata:
+  name: csi-blob-node-secret-role
+rules:
+  - apiGroups: [""]
+    resources: ["secrets"]
+    verbs: ["get"]
+
+---
+kind: ClusterRoleBinding
+apiVersion: rbac.authorization.k8s.io/v1
+metadata:
+  name: csi-blob-node-secret-binding
+subjects:
+  - kind: ServiceAccount
+    name: csi-blob-node-sa
+    namespace: kube-system
+roleRef:
+  kind: ClusterRole
+  name: csi-blob-node-secret-role
+  apiGroup: rbac.authorization.k8s.io
diff --git a/docs/install-blob-csi-driver.md b/docs/install-blob-csi-driver.md
index 36c1cf9c8..668fea9f7 100644
--- a/docs/install-blob-csi-driver.md
+++ b/docs/install-blob-csi-driver.md
@@ -4,6 +4,6 @@
 >  - please use helm install method for more customization, e.g. Azure Stack, RedHat OpenShift support.
 > 
  - [install CSI driver master version](./install-csi-driver-master.md) (only for testing purpose)
+ - [install v1.23.0 CSI driver](./install-csi-driver-v1.23.0.md)
  - [install v1.22.2 CSI driver](./install-csi-driver-v1.22.2.md)
  - [install v1.21.4 CSI driver](./install-csi-driver-v1.21.4.md)
- - [install v1.20.2 CSI driver](./install-csi-driver-v1.20.2.md)
diff --git a/docs/install-csi-driver-v1.23.0.md b/docs/install-csi-driver-v1.23.0.md
new file mode 100644
index 000000000..4bb4fdcb7
--- /dev/null
+++ b/docs/install-csi-driver-v1.23.0.md
@@ -0,0 +1,47 @@
+# Install Azure Blob Storage CSI driver v1.23.0 version on a kubernetes cluster
+> `blobfuse-proxy` is only available for debian based agent nodes, remove `blobfuse-proxy` parameter in installation steps if it's not applicable.
+> 
+If you have already installed Helm, you can also use it to install this driver. Please check [Installation with Helm](../charts/README.md).
+
+## Install with kubectl
+ - Option#1. remote install
+```console
+curl -skSL https://raw.githubusercontent.com/kubernetes-sigs/blob-csi-driver/v1.23.0/deploy/install-driver.sh | bash -s v1.23.0 blobfuse-proxy --
+```
+
+ - Option#2. local install
+```console
+git clone https://github.com/kubernetes-sigs/blob-csi-driver.git
+cd blob-csi-driver
+./deploy/install-driver.sh v1.23.0 local,blobfuse-proxy
+```
+
+- check pods status:
+```console
+kubectl -n kube-system get pod -o wide -l app=csi-blob-controller
+kubectl -n kube-system get pod -o wide -l app=csi-blob-node
+```
+
+example output:
+
+```console
+NAME                                       READY   STATUS    RESTARTS   AGE     IP             NODE
+csi-blob-controller-56bfddd689-dh5tk       4/4     Running   0          35s     10.240.0.19    k8s-agentpool-22533604-0
+csi-blob-controller-56bfddd689-8pgr4       4/4     Running   0          35s     10.240.0.35    k8s-agentpool-22533604-1
+csi-blob-node-cvgbs                        3/3     Running   0          35s     10.240.0.35    k8s-agentpool-22533604-1
+csi-blob-node-dr4s4                        3/3     Running   0          35s     10.240.0.4     k8s-agentpool-22533604-0
+```
+
+### clean up Blob CSI driver
+- Option#1. remote uninstall
+```console
+curl -skSL https://raw.githubusercontent.com/kubernetes-sigs/blob-csi-driver/v1.23.0/deploy/uninstall-driver.sh | bash -s v1.23.0 --
+```
+
+ - Option#2. local uninstall
+```console
+git clone https://github.com/kubernetes-sigs/blob-csi-driver.git
+cd blob-csi-driver
+git checkout v1.23.0
+./deploy/uninstall-driver.sh v1.23.0 local
+```