From 95a2a2057e5967edc3064fef06e92a1e891b6e1a Mon Sep 17 00:00:00 2001
From: andyzhangx <xiazhang@microsoft.com>
Date: Mon, 6 Jan 2025 02:49:46 +0000
Subject: [PATCH] doc: cut v1.31.2 release

---
 Makefile                                      |   2 +-
 README.md                                     |   2 +-
 charts/README.md                              |   2 +-
 charts/index.yaml                             | 115 +--
 charts/latest/azuredisk-csi-driver-1.31.0.tgz | Bin 15105 -> 0 bytes
 charts/latest/azuredisk-csi-driver-1.31.2.tgz | Bin 0 -> 15111 bytes
 charts/latest/azuredisk-csi-driver/Chart.yaml |   4 +-
 .../latest/azuredisk-csi-driver/values.yaml   |   2 +-
 .../v1.31.2/azuredisk-csi-driver-1.31.2.tgz   | Bin 0 -> 15111 bytes
 .../v1.31.2/azuredisk-csi-driver/Chart.yaml   |   5 +
 .../azuredisk-csi-driver/templates/NOTES.txt  |   5 +
 .../templates/_helpers.tpl                    |  26 +
 .../templates/crd-csi-snapshot.yaml           | 840 ++++++++++++++++++
 .../templates/csi-azuredisk-controller.yaml   | 346 ++++++++
 .../templates/csi-azuredisk-driver.yaml       |  13 +
 ...si-azuredisk-node-windows-hostprocess.yaml | 174 ++++
 .../templates/csi-azuredisk-node-windows.yaml | 248 ++++++
 .../templates/csi-azuredisk-node.yaml         | 270 ++++++
 .../templates/csi-snapshot-controller.yaml    | 115 +++
 .../rbac-csi-azuredisk-controller.yaml        | 205 +++++
 .../templates/rbac-csi-azuredisk-node.yaml    |  31 +
 .../rbac-csi-snapshot-controller.yaml         |  72 ++
 ...rviceaccount-csi-azuredisk-controller.yaml |  16 +
 .../serviceaccount-csi-azuredisk-node.yaml    |  16 +
 ...erviceaccount-csi-snapshot-controller.yaml |   7 +
 .../v1.31.2/azuredisk-csi-driver/values.yaml  | 294 ++++++
 deploy/csi-azuredisk-controller.yaml          |   2 +-
 ...si-azuredisk-node-windows-hostprocess.yaml |   4 +-
 deploy/csi-azuredisk-node-windows.yaml        |   2 +-
 deploy/csi-azuredisk-node.yaml                |   2 +-
 deploy/v1.31.2/crd-csi-snapshot.yaml          | 838 +++++++++++++++++
 deploy/v1.31.2/csi-azuredisk-controller.yaml  | 223 +++++
 deploy/v1.31.2/csi-azuredisk-driver.yaml      |  12 +
 ...si-azuredisk-node-windows-hostprocess.yaml | 120 +++
 .../v1.31.2/csi-azuredisk-node-windows.yaml   | 198 +++++
 deploy/v1.31.2/csi-azuredisk-node.yaml        | 178 ++++
 deploy/v1.31.2/csi-snapshot-controller.yaml   |  62 ++
 .../rbac-csi-azuredisk-controller.yaml        | 202 +++++
 deploy/v1.31.2/rbac-csi-azuredisk-node.yaml   |  35 +
 .../v1.31.2/rbac-csi-snapshot-controller.yaml |  78 ++
 docs/install-azuredisk-csi-driver.md          |   2 +-
 docs/install-csi-driver-v1.31.2.md            |  48 +
 42 files changed, 4751 insertions(+), 65 deletions(-)
 delete mode 100644 charts/latest/azuredisk-csi-driver-1.31.0.tgz
 create mode 100644 charts/latest/azuredisk-csi-driver-1.31.2.tgz
 create mode 100644 charts/v1.31.2/azuredisk-csi-driver-1.31.2.tgz
 create mode 100644 charts/v1.31.2/azuredisk-csi-driver/Chart.yaml
 create mode 100644 charts/v1.31.2/azuredisk-csi-driver/templates/NOTES.txt
 create mode 100644 charts/v1.31.2/azuredisk-csi-driver/templates/_helpers.tpl
 create mode 100644 charts/v1.31.2/azuredisk-csi-driver/templates/crd-csi-snapshot.yaml
 create mode 100644 charts/v1.31.2/azuredisk-csi-driver/templates/csi-azuredisk-controller.yaml
 create mode 100644 charts/v1.31.2/azuredisk-csi-driver/templates/csi-azuredisk-driver.yaml
 create mode 100644 charts/v1.31.2/azuredisk-csi-driver/templates/csi-azuredisk-node-windows-hostprocess.yaml
 create mode 100644 charts/v1.31.2/azuredisk-csi-driver/templates/csi-azuredisk-node-windows.yaml
 create mode 100644 charts/v1.31.2/azuredisk-csi-driver/templates/csi-azuredisk-node.yaml
 create mode 100644 charts/v1.31.2/azuredisk-csi-driver/templates/csi-snapshot-controller.yaml
 create mode 100644 charts/v1.31.2/azuredisk-csi-driver/templates/rbac-csi-azuredisk-controller.yaml
 create mode 100644 charts/v1.31.2/azuredisk-csi-driver/templates/rbac-csi-azuredisk-node.yaml
 create mode 100644 charts/v1.31.2/azuredisk-csi-driver/templates/rbac-csi-snapshot-controller.yaml
 create mode 100644 charts/v1.31.2/azuredisk-csi-driver/templates/serviceaccount-csi-azuredisk-controller.yaml
 create mode 100644 charts/v1.31.2/azuredisk-csi-driver/templates/serviceaccount-csi-azuredisk-node.yaml
 create mode 100644 charts/v1.31.2/azuredisk-csi-driver/templates/serviceaccount-csi-snapshot-controller.yaml
 create mode 100644 charts/v1.31.2/azuredisk-csi-driver/values.yaml
 create mode 100644 deploy/v1.31.2/crd-csi-snapshot.yaml
 create mode 100644 deploy/v1.31.2/csi-azuredisk-controller.yaml
 create mode 100644 deploy/v1.31.2/csi-azuredisk-driver.yaml
 create mode 100644 deploy/v1.31.2/csi-azuredisk-node-windows-hostprocess.yaml
 create mode 100644 deploy/v1.31.2/csi-azuredisk-node-windows.yaml
 create mode 100644 deploy/v1.31.2/csi-azuredisk-node.yaml
 create mode 100644 deploy/v1.31.2/csi-snapshot-controller.yaml
 create mode 100644 deploy/v1.31.2/rbac-csi-azuredisk-controller.yaml
 create mode 100644 deploy/v1.31.2/rbac-csi-azuredisk-node.yaml
 create mode 100644 deploy/v1.31.2/rbac-csi-snapshot-controller.yaml
 create mode 100644 docs/install-csi-driver-v1.31.2.md

diff --git a/Makefile b/Makefile
index a4f532322a..5db82ba2d7 100644
--- a/Makefile
+++ b/Makefile
@@ -19,7 +19,7 @@ REGISTRY_NAME ?= $(shell echo $(REGISTRY) | sed "s/.azurecr.io//g")
 IMAGE_NAME ?= azuredisk-csi
 ifneq ($(BUILD_V2), true)
 PLUGIN_NAME = azurediskplugin
-IMAGE_VERSION ?= v1.31.1
+IMAGE_VERSION ?= v1.31.2
 CHART_VERSION ?= latest
 else
 PLUGIN_NAME = azurediskpluginv2
diff --git a/README.md b/README.md
index 889e5016ba..83598d2632 100644
--- a/README.md
+++ b/README.md
@@ -17,7 +17,7 @@ Disclaimer: Deploying this driver manually is not an officially supported Micros
 |Driver Version  |Image                                                      | supported k8s version |
 |----------------|-----------------------------------------------------------|-----------------------|
 |`master` branch |mcr.microsoft.com/k8s/csi/azuredisk-csi:latest             | 1.21+                 |
-|v1.31.1         |mcr.microsoft.com/oss/kubernetes-csi/azuredisk-csi:v1.31.1 | 1.21+                 |
+|v1.31.2         |mcr.microsoft.com/oss/kubernetes-csi/azuredisk-csi:v1.31.2 | 1.21+                 |
 |v1.30.3         |mcr.microsoft.com/oss/kubernetes-csi/azuredisk-csi:v1.30.3 | 1.21+                 |
 |v1.29.8         |mcr.microsoft.com/oss/kubernetes-csi/azuredisk-csi:v1.29.8 | 1.21+                 |
 |v1.28.10         |mcr.microsoft.com/oss/kubernetes-csi/azuredisk-csi:v1.28.10 | 1.21+                 |
diff --git a/charts/README.md b/charts/README.md
index caf8859a50..5b17cf757d 100644
--- a/charts/README.md
+++ b/charts/README.md
@@ -60,7 +60,7 @@ helm repo update azuredisk-csi-driver
 ### install a specific version
 
 ```console
-helm install azuredisk-csi-driver azuredisk-csi-driver/azuredisk-csi-driver --namespace kube-system --version v1.31.1
+helm install azuredisk-csi-driver azuredisk-csi-driver/azuredisk-csi-driver --namespace kube-system --version v1.31.2
 ```
 
 ### install on Azure Stack
diff --git a/charts/index.yaml b/charts/index.yaml
index 71e3dc1e64..515f175ddc 100644
--- a/charts/index.yaml
+++ b/charts/index.yaml
@@ -3,7 +3,7 @@ entries:
   azuredisk-csi-driver:
   - apiVersion: v1
     appVersion: v2.0.0-beta.6
-    created: "2024-11-14T11:47:35.397783905Z"
+    created: "2025-01-06T02:49:20.908888184Z"
     description: Azure disk Container Storage Interface (CSI) Storage Plugin
     digest: 0e7280d2bcd752668c4439078ffdfc4567ac97af97d8baa07c322b99c34fb741
     name: azuredisk-csi-driver
@@ -12,7 +12,7 @@ entries:
     version: v2.0.0-beta.6
   - apiVersion: v1
     appVersion: v2.0.0-beta.5
-    created: "2024-11-14T11:47:35.394908531Z"
+    created: "2025-01-06T02:49:20.907187043Z"
     description: Azure disk Container Storage Interface (CSI) Storage Plugin
     digest: 10189dd78863d24c9572c468e0d81b8781f83625118e6b205ee65e157aab0602
     name: azuredisk-csi-driver
@@ -20,35 +20,44 @@ entries:
     - https://raw.githubusercontent.com/kubernetes-sigs/azuredisk-csi-driver/master/charts/v2.0.0-beta.5/azuredisk-csi-driver-v2.0.0-beta.5.tgz
     version: v2.0.0-beta.5
   - apiVersion: v1
-    appVersion: 1.31.0
-    created: "2024-11-14T11:47:35.393536672Z"
+    appVersion: 1.31.2
+    created: "2025-01-06T02:49:20.904931789Z"
     description: Azure disk Container Storage Interface (CSI) Storage Plugin
-    digest: 422a7dd3396e5e151ff0280fd94e4627fcebc95f506cd02842fa8cb82e6c303c
+    digest: 17087ecf3f0574d5d84b502978c825890a3415ab568a04156725196451d96b1b
     name: azuredisk-csi-driver
     urls:
-    - https://raw.githubusercontent.com/kubernetes-sigs/azuredisk-csi-driver/master/charts/v1.31.1/azuredisk-csi-driver-1.31.0.tgz
-    version: 1.31.0
+    - https://raw.githubusercontent.com/kubernetes-sigs/azuredisk-csi-driver/master/charts/v1.31.2/azuredisk-csi-driver-1.31.2.tgz
+    version: 1.31.2
+  - apiVersion: v1
+    appVersion: 1.31.2
+    created: "2025-01-06T02:49:20.851690845Z"
+    description: Azure disk Container Storage Interface (CSI) Storage Plugin
+    digest: 8db7d86c87ef23e738e91759b8b4b5d9c5dcc55686d56ae1c5b9f096c770a3bf
+    name: azuredisk-csi-driver
+    urls:
+    - https://raw.githubusercontent.com/kubernetes-sigs/azuredisk-csi-driver/master/charts/latest/azuredisk-csi-driver-1.31.2.tgz
+    version: 1.31.2
   - apiVersion: v1
     appVersion: 1.31.0
-    created: "2024-11-14T11:47:35.392308122Z"
+    created: "2025-01-06T02:49:20.903722136Z"
     description: Azure disk Container Storage Interface (CSI) Storage Plugin
-    digest: 6566b16184fceb04238c3b846620f131b2790d7dfa6c03e53b11613d4cd5e4f4
+    digest: 422a7dd3396e5e151ff0280fd94e4627fcebc95f506cd02842fa8cb82e6c303c
     name: azuredisk-csi-driver
     urls:
-    - https://raw.githubusercontent.com/kubernetes-sigs/azuredisk-csi-driver/master/charts/v1.31.0/azuredisk-csi-driver-1.31.0.tgz
+    - https://raw.githubusercontent.com/kubernetes-sigs/azuredisk-csi-driver/master/charts/v1.31.1/azuredisk-csi-driver-1.31.0.tgz
     version: 1.31.0
   - apiVersion: v1
     appVersion: 1.31.0
-    created: "2024-11-14T11:47:35.339690727Z"
+    created: "2025-01-06T02:49:20.902495333Z"
     description: Azure disk Container Storage Interface (CSI) Storage Plugin
-    digest: 422a7dd3396e5e151ff0280fd94e4627fcebc95f506cd02842fa8cb82e6c303c
+    digest: 6566b16184fceb04238c3b846620f131b2790d7dfa6c03e53b11613d4cd5e4f4
     name: azuredisk-csi-driver
     urls:
-    - https://raw.githubusercontent.com/kubernetes-sigs/azuredisk-csi-driver/master/charts/latest/azuredisk-csi-driver-1.31.0.tgz
+    - https://raw.githubusercontent.com/kubernetes-sigs/azuredisk-csi-driver/master/charts/v1.31.0/azuredisk-csi-driver-1.31.0.tgz
     version: 1.31.0
   - apiVersion: v1
     appVersion: v1.30.3
-    created: "2024-11-14T11:47:35.391092917Z"
+    created: "2025-01-06T02:49:20.901236944Z"
     description: Azure disk Container Storage Interface (CSI) Storage Plugin
     digest: 62423183e2ea8bafcbbf586361e3410b25a82d861fa479f718ed9be5f2e8dcce
     name: azuredisk-csi-driver
@@ -57,7 +66,7 @@ entries:
     version: v1.30.3
   - apiVersion: v1
     appVersion: v1.30.2
-    created: "2024-11-14T11:47:35.388928797Z"
+    created: "2025-01-06T02:49:20.89914007Z"
     description: Azure disk Container Storage Interface (CSI) Storage Plugin
     digest: 86bdb8d2801e587296848d1a426c4730f0a214e6690b3cbf067553a90ab1870e
     name: azuredisk-csi-driver
@@ -66,7 +75,7 @@ entries:
     version: v1.30.2
   - apiVersion: v1
     appVersion: v1.30.1
-    created: "2024-11-14T11:47:35.387758697Z"
+    created: "2025-01-06T02:49:20.897945617Z"
     description: Azure disk Container Storage Interface (CSI) Storage Plugin
     digest: fdd86f1db134c9a61ed82d0a5c7fd9b268755a56fa4e225dfdcf544e21dd1615
     name: azuredisk-csi-driver
@@ -75,7 +84,7 @@ entries:
     version: v1.30.1
   - apiVersion: v1
     appVersion: v1.30.0
-    created: "2024-11-14T11:47:35.386592615Z"
+    created: "2025-01-06T02:49:20.896755566Z"
     description: Azure disk Container Storage Interface (CSI) Storage Plugin
     digest: e76dc3ae89d3040cf078ca3232577d29e100813670ca5138a297bc3b2e1c5514
     name: azuredisk-csi-driver
@@ -84,7 +93,7 @@ entries:
     version: v1.30.0
   - apiVersion: v1
     appVersion: v1.29.8
-    created: "2024-11-14T11:47:35.385193979Z"
+    created: "2025-01-06T02:49:20.895588127Z"
     description: Azure disk Container Storage Interface (CSI) Storage Plugin
     digest: a1da319541d5cb28b30967672a4675021090d24c492bd376f623aa7b5d240918
     name: azuredisk-csi-driver
@@ -93,7 +102,7 @@ entries:
     version: v1.29.8
   - apiVersion: v1
     appVersion: v1.29.7
-    created: "2024-11-14T11:47:35.382543592Z"
+    created: "2025-01-06T02:49:20.894204842Z"
     description: Azure disk Container Storage Interface (CSI) Storage Plugin
     digest: 3b14cbf811e0034f879b85e75854806bce38edb57e10fed7dba5e9c9f134f176
     name: azuredisk-csi-driver
@@ -102,7 +111,7 @@ entries:
     version: v1.29.7
   - apiVersion: v1
     appVersion: v1.29.5
-    created: "2024-11-14T11:47:35.381364207Z"
+    created: "2025-01-06T02:49:20.892260674Z"
     description: Azure disk Container Storage Interface (CSI) Storage Plugin
     digest: b15f92d13ad8cbc6c6ab48baffe25536866e5e69314eb5cf6d36619241fb0279
     name: azuredisk-csi-driver
@@ -111,7 +120,7 @@ entries:
     version: v1.29.5
   - apiVersion: v1
     appVersion: v1.29.2
-    created: "2024-11-14T11:47:35.380179963Z"
+    created: "2025-01-06T02:49:20.891038876Z"
     description: Azure disk Container Storage Interface (CSI) Storage Plugin
     digest: ae0c15b875bb0bd2a4c1135437f0abfee6bf3591abcc502604317b3fe46015ff
     name: azuredisk-csi-driver
@@ -120,7 +129,7 @@ entries:
     version: v1.29.2
   - apiVersion: v1
     appVersion: v1.29.1
-    created: "2024-11-14T11:47:35.379018152Z"
+    created: "2025-01-06T02:49:20.889855093Z"
     description: Azure disk Container Storage Interface (CSI) Storage Plugin
     digest: 441c64c6487a89efda91f22aa40358b6f9d31c73e2f131cfc10dcddd628af54f
     name: azuredisk-csi-driver
@@ -129,7 +138,7 @@ entries:
     version: v1.29.1
   - apiVersion: v1
     appVersion: v1.29.0
-    created: "2024-11-14T11:47:35.377842097Z"
+    created: "2025-01-06T02:49:20.888618571Z"
     description: Azure disk Container Storage Interface (CSI) Storage Plugin
     digest: 611857811af7ac3304f7cae847be4f35bad6735482700d5b2c970dfbb53f9a3b
     name: azuredisk-csi-driver
@@ -138,7 +147,7 @@ entries:
     version: v1.29.0
   - apiVersion: v1
     appVersion: v1.28.10
-    created: "2024-11-14T11:47:35.367659707Z"
+    created: "2025-01-06T02:49:20.878415729Z"
     description: Azure disk Container Storage Interface (CSI) Storage Plugin
     digest: 0a186f610f7b723da55f81aeffd2d1e2a8dbb293dd45da6fc5f71f1fe15bc71c
     name: azuredisk-csi-driver
@@ -147,7 +156,7 @@ entries:
     version: v1.28.10
   - apiVersion: v1
     appVersion: v1.28.9
-    created: "2024-11-14T11:47:35.375710517Z"
+    created: "2025-01-06T02:49:20.886547706Z"
     description: Azure disk Container Storage Interface (CSI) Storage Plugin
     digest: 8e2069be5d367516339f474a41563675ce7d797d6e53d458471e6137fa293355
     name: azuredisk-csi-driver
@@ -156,7 +165,7 @@ entries:
     version: v1.28.9
   - apiVersion: v1
     appVersion: v1.28.7
-    created: "2024-11-14T11:47:35.374600602Z"
+    created: "2025-01-06T02:49:20.885386877Z"
     description: Azure disk Container Storage Interface (CSI) Storage Plugin
     digest: 98008a5df89122ccb01927e0f33b91453c31369c4d105e8bf89d6741064d9cdf
     name: azuredisk-csi-driver
@@ -165,7 +174,7 @@ entries:
     version: v1.28.7
   - apiVersion: v1
     appVersion: v1.28.5
-    created: "2024-11-14T11:47:35.373425869Z"
+    created: "2025-01-06T02:49:20.884226229Z"
     description: Azure disk Container Storage Interface (CSI) Storage Plugin
     digest: 1c8d6bb8882ddc62b699f877734f637291f755436474b4daeb80b395a9d5cdf1
     name: azuredisk-csi-driver
@@ -174,7 +183,7 @@ entries:
     version: v1.28.5
   - apiVersion: v1
     appVersion: v1.28.4
-    created: "2024-11-14T11:47:35.372155144Z"
+    created: "2025-01-06T02:49:20.883086938Z"
     description: Azure disk Container Storage Interface (CSI) Storage Plugin
     digest: f1b8fa60b0769577c563e33d475544577b37bb2430d027bfe92b91ad8588744d
     name: azuredisk-csi-driver
@@ -183,7 +192,7 @@ entries:
     version: v1.28.4
   - apiVersion: v1
     appVersion: v1.28.3
-    created: "2024-11-14T11:47:35.369930052Z"
+    created: "2025-01-06T02:49:20.881815461Z"
     description: Azure disk Container Storage Interface (CSI) Storage Plugin
     digest: 12fe80d19091cc4bc0025585da35d12bcab9cbc2f3e4cfd90eb4368e6967931a
     name: azuredisk-csi-driver
@@ -192,7 +201,7 @@ entries:
     version: v1.28.3
   - apiVersion: v1
     appVersion: v1.28.2
-    created: "2024-11-14T11:47:35.36876918Z"
+    created: "2025-01-06T02:49:20.879570877Z"
     description: Azure disk Container Storage Interface (CSI) Storage Plugin
     digest: 044dc6ffb662914020a3a835f994455a3301a4b2b665c9d4b9496b422a93c8b1
     name: azuredisk-csi-driver
@@ -201,7 +210,7 @@ entries:
     version: v1.28.2
   - apiVersion: v1
     appVersion: v1.27.1
-    created: "2024-11-14T11:47:35.36652916Z"
+    created: "2025-01-06T02:49:20.877244866Z"
     description: Azure disk Container Storage Interface (CSI) Storage Plugin
     digest: 805d2f7437e7442739c18791e3eaf839d75bc9f3c1a10710e6cc6cb7ee06cbc4
     name: azuredisk-csi-driver
@@ -210,7 +219,7 @@ entries:
     version: v1.27.1
   - apiVersion: v1
     appVersion: v1.26.8
-    created: "2024-11-14T11:47:35.365415736Z"
+    created: "2025-01-06T02:49:20.87612555Z"
     description: Azure disk Container Storage Interface (CSI) Storage Plugin
     digest: 3920ea0e2c358bc659b4bc243ad35420959d59c7532ebcf775de6c819ff0aca6
     name: azuredisk-csi-driver
@@ -219,7 +228,7 @@ entries:
     version: v1.26.8
   - apiVersion: v1
     appVersion: v1.26.7
-    created: "2024-11-14T11:47:35.363448322Z"
+    created: "2025-01-06T02:49:20.875039558Z"
     description: Azure disk Container Storage Interface (CSI) Storage Plugin
     digest: 8796e69d622aaef119bf87047d1d7ed699e88119d48655590813ec5a38a3ccab
     name: azuredisk-csi-driver
@@ -228,7 +237,7 @@ entries:
     version: v1.26.7
   - apiVersion: v1
     appVersion: v1.26.6
-    created: "2024-11-14T11:47:35.362412017Z"
+    created: "2025-01-06T02:49:20.873195478Z"
     description: Azure disk Container Storage Interface (CSI) Storage Plugin
     digest: 277051eba7872783d34d9b8ba7bd606f3161afe571523eaabfa8b400491010c9
     name: azuredisk-csi-driver
@@ -237,7 +246,7 @@ entries:
     version: v1.26.6
   - apiVersion: v1
     appVersion: v1.25.0
-    created: "2024-11-14T11:47:35.36135744Z"
+    created: "2025-01-06T02:49:20.872103016Z"
     description: Azure disk Container Storage Interface (CSI) Storage Plugin
     digest: cc1a78eb68d741382945252fdc86dc38fc903bcc7448eef5753a1e663e4e6e3c
     name: azuredisk-csi-driver
@@ -246,7 +255,7 @@ entries:
     version: v1.25.0
   - apiVersion: v1
     appVersion: v1.24.0
-    created: "2024-11-14T11:47:35.360276103Z"
+    created: "2025-01-06T02:49:20.871052796Z"
     description: Azure disk Container Storage Interface (CSI) Storage Plugin
     digest: 8f4a2048cd3d8ef128e533c43c5b68464989e28949658010599d466b2ccb1b58
     name: azuredisk-csi-driver
@@ -255,7 +264,7 @@ entries:
     version: v1.24.0
   - apiVersion: v1
     appVersion: v1.23.0
-    created: "2024-11-14T11:47:35.35897328Z"
+    created: "2025-01-06T02:49:20.870015732Z"
     description: Azure disk Container Storage Interface (CSI) Storage Plugin
     digest: 4347271a297c6c95e10c4a880a08453c22839c95ad7db232d2d8fc38e926b385
     name: azuredisk-csi-driver
@@ -264,7 +273,7 @@ entries:
     version: v1.23.0
   - apiVersion: v1
     appVersion: v1.22.0
-    created: "2024-11-14T11:47:35.357076801Z"
+    created: "2025-01-06T02:49:20.868907006Z"
     description: Azure disk Container Storage Interface (CSI) Storage Plugin
     digest: fc7adc9ddb406356bee117d3ba5c360408b4ee9a7decc30d34fe310d0cdd6aef
     name: azuredisk-csi-driver
@@ -273,7 +282,7 @@ entries:
     version: v1.22.0
   - apiVersion: v1
     appVersion: v1.21.0
-    created: "2024-11-14T11:47:35.356059486Z"
+    created: "2025-01-06T02:49:20.866980745Z"
     description: Azure disk Container Storage Interface (CSI) Storage Plugin
     digest: 50a5c0860aa631c7e83affbaeac1a84c43c96b19175e1dd1c21cba472564798d
     name: azuredisk-csi-driver
@@ -282,7 +291,7 @@ entries:
     version: v1.21.0
   - apiVersion: v1
     appVersion: v1.20.0
-    created: "2024-11-14T11:47:35.355050611Z"
+    created: "2025-01-06T02:49:20.865939071Z"
     description: Azure disk Container Storage Interface (CSI) Storage Plugin
     digest: 9f2a936be5efc45002c12d5bbbd8cb453e51a0c1668f6ceae51df656ac190c95
     name: azuredisk-csi-driver
@@ -291,7 +300,7 @@ entries:
     version: v1.20.0
   - apiVersion: v1
     appVersion: v1.19.0
-    created: "2024-11-14T11:47:35.354041325Z"
+    created: "2025-01-06T02:49:20.864872348Z"
     description: Azure disk Container Storage Interface (CSI) Storage Plugin
     digest: 6c044a33b4adf598b9810e8839f04a16b1214470eceeb61bbe48076552955296
     name: azuredisk-csi-driver
@@ -300,7 +309,7 @@ entries:
     version: v1.19.0
   - apiVersion: v1
     appVersion: v1.18.0
-    created: "2024-11-14T11:47:35.352738997Z"
+    created: "2025-01-06T02:49:20.863873011Z"
     description: Azure disk Container Storage Interface (CSI) Storage Plugin
     digest: 79474616c7373ed65bbf75050748fda16ae2f6b290d240813006abd74e733628
     name: azuredisk-csi-driver
@@ -309,7 +318,7 @@ entries:
     version: v1.18.0
   - apiVersion: v1
     appVersion: v1.17.0
-    created: "2024-11-14T11:47:35.350413391Z"
+    created: "2025-01-06T02:49:20.862867742Z"
     description: Azure disk Container Storage Interface (CSI) Storage Plugin
     digest: dcaad8438f57941c19f2269d9d4510591529f4de00353d12506fd277dc06378e
     name: azuredisk-csi-driver
@@ -318,7 +327,7 @@ entries:
     version: v1.17.0
   - apiVersion: v1
     appVersion: v1.16.0
-    created: "2024-11-14T11:47:35.349427028Z"
+    created: "2025-01-06T02:49:20.860894273Z"
     description: Azure disk Container Storage Interface (CSI) Storage Plugin
     digest: 95108dce3a4da8aad2729ff8bc1587906b917925e6fe2e5935b5d25805080fb4
     name: azuredisk-csi-driver
@@ -327,7 +336,7 @@ entries:
     version: v1.16.0
   - apiVersion: v1
     appVersion: v1.15.0
-    created: "2024-11-14T11:47:35.348417038Z"
+    created: "2025-01-06T02:49:20.859933533Z"
     description: Azure disk Container Storage Interface (CSI) Storage Plugin
     digest: 3da85b9206af81dc4217a3304bf14839158112300de7dbb95841e30daaf5e4e5
     name: azuredisk-csi-driver
@@ -336,7 +345,7 @@ entries:
     version: v1.15.0
   - apiVersion: v1
     appVersion: v1.14.0
-    created: "2024-11-14T11:47:35.347420471Z"
+    created: "2025-01-06T02:49:20.858952859Z"
     description: Azure disk Container Storage Interface (CSI) Storage Plugin
     digest: 89e87dead7767f8abd56096e436956b23a666802040f7aad91d5b6c36af8b098
     name: azuredisk-csi-driver
@@ -345,7 +354,7 @@ entries:
     version: v1.14.0
   - apiVersion: v1
     appVersion: v1.13.0
-    created: "2024-11-14T11:47:35.345879825Z"
+    created: "2025-01-06T02:49:20.857969337Z"
     description: Azure disk Container Storage Interface (CSI) Storage Plugin
     digest: c109533218e0625e9ca33c2db5e73c4b550b88943f7950b33e02a344a8ff9f8c
     name: azuredisk-csi-driver
@@ -354,7 +363,7 @@ entries:
     version: v1.13.0
   - apiVersion: v1
     appVersion: v1.12.0
-    created: "2024-11-14T11:47:35.344738746Z"
+    created: "2025-01-06T02:49:20.856902006Z"
     description: Azure disk Container Storage Interface (CSI) Storage Plugin
     digest: e41f089e5216fc9263039310990d1e41bcb468a85879289af1834dea0c457aaa
     name: azuredisk-csi-driver
@@ -363,7 +372,7 @@ entries:
     version: v1.12.0
   - apiVersion: v1
     appVersion: v1.11.0
-    created: "2024-11-14T11:47:35.342855751Z"
+    created: "2025-01-06T02:49:20.854839378Z"
     description: Azure disk Container Storage Interface (CSI) Storage Plugin
     digest: f35447c256488b1942342e9fcf8b6bed5f47b4ae5fb0fdae037110c5926803fe
     name: azuredisk-csi-driver
@@ -372,7 +381,7 @@ entries:
     version: v1.11.0
   - apiVersion: v1
     appVersion: v1.10.0
-    created: "2024-11-14T11:47:35.341839901Z"
+    created: "2025-01-06T02:49:20.853833324Z"
     description: Azure disk Container Storage Interface (CSI) Storage Plugin
     digest: 12bd0e1f20a2e2adcb04b6954423438d9ece7a2ad0fb4b4fe2969844d14cfb86
     name: azuredisk-csi-driver
@@ -381,7 +390,7 @@ entries:
     version: v1.10.0
   - apiVersion: v1
     appVersion: v1.1.1
-    created: "2024-11-14T11:47:35.340783909Z"
+    created: "2025-01-06T02:49:20.852761797Z"
     description: Azure disk Container Storage Interface (CSI) Storage Plugin
     digest: dd7066be8f499f6c1a396ab27c0013c09f5a8d8319cc04fbdd480d31107bb851
     name: azuredisk-csi-driver
@@ -390,11 +399,11 @@ entries:
     version: v1.1.1
   - apiVersion: v1
     appVersion: v1.1.0
-    created: "2024-11-14T11:47:35.340252073Z"
+    created: "2025-01-06T02:49:20.85225126Z"
     description: Azure disk Container Storage Interface (CSI) Storage Plugin
     digest: 3d2a5189416dd6a43bd3e2097bbe23a8db347b6e1a36c6a43fd59cc9c9633ff3
     name: azuredisk-csi-driver
     urls:
     - https://raw.githubusercontent.com/kubernetes-sigs/azuredisk-csi-driver/master/charts/v1.1.0/azuredisk-csi-driver-v1.1.0.tgz
     version: v1.1.0
-generated: "2024-11-14T11:47:35.338240341Z"
+generated: "2025-01-06T02:49:20.850250853Z"
diff --git a/charts/latest/azuredisk-csi-driver-1.31.0.tgz b/charts/latest/azuredisk-csi-driver-1.31.0.tgz
deleted file mode 100644
index b23abe5ea03cb20e119460bbff5c9f8c1cab91ab..0000000000000000000000000000000000000000
GIT binary patch
literal 0
HcmV?d00001

literal 15105
zcmV+cJO0EUiwG0|00000|0w_~VMtOiV@ORlOnEsqVl!4SWK%V1T2nbTPgYhoO;>Dc
zVQyr3R8em|NM&qo0PMZ{a@;tQH`;&eDG=rP!uF0?y4vooa~vBQN$u8YTT-axo}F#?
z@jzr&6-Fe$0YFLBZb!_6eBaB>lYD^-?;wkH(Z%lK?zB}TkhmohiOgRD__u^ZK*W{j
z3*rTwTm#=cm|!mZQyhigt>W3*+S+=xx2ONz+S;oAyS20P>bvc|*SkAAuS~k_mpgl}
zze8IqDSgJ12#NW3TT7Q!ZQNJ#;F$ajTo6VF=z4nt$8q*^yT7~L-`WU3_?*O2zuQ;r
zf)u}?14bn#6gV16#_<@?F_pka*a!6NV0ipIdw&)tV?sA5j$nXX47YJzDf6Lw<&X0?
z=l?Yh6A&vC0PXXC`}OwT>+1Y}xxJqM_wtYkk72NZ&?Odd4lx^`$mjit_?!tgl6{{=
z8z`T(Dk(x7VkU@Wd^$jzOo+{^<Ptaq2}1GFW{InG4vEJ~z^LiHtzX1R7@o0^_|pM8
z9-T0G#z6p;8wmM=oN;zdlt=*HtwhDWah|DA=F7g4D6@;)mlFGvdCJ2!N1?F2{_9SK
zor561%~KXP8A^S*y)(P4kX!==A<j6vgl@&9Sz?u?P~c8~dvA7ulm&38#mG5~iI5!6
z(Mpxs3L%fD*~?X!+2#!a{F?Z%@B1vFQWfrVz!C;X@&wQm^w$Yc{r3xG(;{pV3v@%m
z5M6@J5}*;|Xv&g48iGWUp%D%RATm-f(G8~hWg<ZR=7`<UzABGV$ypczA0W*r`E<y>
zcmks*=mbZA*a!`6J#3{F(LyB{S49N2cdImYr!7QHP#lX1lLwXhrtg=m?gqcaezpHq
zBg%@v#zvvPvd>NZrpSdX2@V(?k?|0G4)P=?=;@C}6a>wwMT~tIAjN{7m<kD6$b})h
zIf`OAJ;?J6%#d#&1QcI}aKZ6tMEv)d;<4(l^s6krKVw`D(CgRVf4`wQKO{aD1GKY&
zPy~__Uzij-|M_Zb&pk~ifI~USlc~Hsp{Mjc7P45ferbpBEW{M@PXQ6C&imJxg!qz#
zL{5hwPgnpVPjnq!Ok)_JUT*`Tf(-pD<5$2hCLC}e255UrO}td*)jw`&QbHW4?-v*E
zj_DA5M%7nOiTsd_-@!G61N2gL=B?y-pO3`={qpMuLQFz<!Ld*1*fihtc92)oq_LcL
zGK)t{>Z9A3aS8m01~DU44p46*Wjxs244IF^2@`U#x4ZpXwOq0gI96(|Fg5Vd6-)=H
zr{@=EA@p;J)hBE-(&Nz6X%S+v%FXxy^^R_dkRts6qY?P3<P$dZClDkd^g7YE?TOWp
z-gznBii$blL=qo|`$52{IHloqQJQLSPC(u;ew9gXIUxcGkdn|b@>voFO72)L50qHW
znE(Y01foo$0Aip4Vidg}9;ewAN8(Ee#Q=T&q8OV}ChhQ>H!%y|6;s44*smp0-8zI2
zeBClbX*42~$f^CwL9m4TV7bbr+^G2<5h>DNN=QU{p?tZu^`6+b9R8VrD5mn`L`}V@
zmTf1^Rnu$kw5XC+bEhQ@?FuDlm$tWLX%5lcT-f%Kg;n(IyXnIXtwr47Li$88J@9J?
zP=F;i_5u+yiD(jC0!J}$J#$_lqwMvsS(rp%SoNK1GKvx*)#Uzv(UzG+n%*In_>hRJ
zVaVi35)Jf6k;F>O{|}?Nj?u7|+plA@2p%8)z*%(s{&1KtGZDW1K(SdcLl~g?($!(D
z-rd+pb*RCHV=c>79EYm4fl#(9Yhv~;%CyL{*<416{=T2;(5;Gmspx}}hSsG9?uN}>
z3x|rTGtKJ3s@7GJ_AYr}m-r1bzb4b~O4R+VXGJy!Ar_)hIdW;u*TUD|0ti7hAnoHr
z_1k2NF~<=|;90c@^*Ka9B@PGZX;00V-c$4hWpe@<^Uwg9Z!b_!*P@4>nHT7CiUJtn
zB$RslWNe0K$z@1<q-Wy`glUjvb0!~3>|dGG&$IqBo&J`yBv$IGvr<R@eLTE4K6#7I
zkA|lo&JT{z+w;>8XXx4SNGk&(2A_-w1TQk)$~JvMGOpAJisS^4P@A2!P&8JhA}o;o
zom)bm=X@<}wIm*^wnSJC(9<iJZoj$4;r5FwnC_^*cAgp*3<9Et1&0N$+ZX|s35Q&6
z{4mrlP6tnmuni+O^X-zVNZ%KvuSefnZJsD;MxrE2<t`gp1>SU-W-pOTV^<a;)aVcj
zf!-wZK&f7m=?sWaAu;s<$!QFQfqdp|t6r%|b-NYt6CqjjK>*($gVxHG!k47KhskI}
zZU?A$Ivjcv2%}zVfqKh^hd;f`q;Ufa^m@-IQ$kxje}N8<{_^4N3v_()!|4n3*ZuR8
z<CC{9(9!w%>A6xerHqvzzn$7js29cGl;yuRLPC?<l0diXNg!Ms65T~lP=Fy~RDje&
zwSn|v8G;<3&1=jzLvp!k-<Tbn<ZOTfxFnc5n`b_~KqCkk$60O8fR9dNNh0zaHpY5e
zxfN`!R7+O1sdDZE7E|_P;G;9nMkEBqr+=r6!ru$aI~_5#z^Ajz*lwPv&nf$k7#eXF
znV)8b&`b?DP?JTe2KTm6P$~A)R~zYyK{y152`6-HH%EkykH?f{ua9oQPxOFWIaDm^
z0(ewda6A-Y=}(SsV-7;(qmqBuyErwQOYe)jw-Y9hY2~YB&B|Lv@0xI#;LyuCys~!Q
zt9spNoO}ct{r1)}D*X+i0lN_{;gksYkqLRmnGZr_ZadLIdU-d5wo0(42ZN8-n12k(
z<wyJS=^ac!)1-9Fv?`<7WyK;+HFx#4ql&?WiA60UYccd##L&xyX6oKDVrX`eyKP0@
zxfs$VZD<>Tg$WpqU#svN8&95~a~J^!tt~RdC?LjB#5f?KtqH<<5fT9bx|smg+d{SW
z>)o(WBsh!)MrRvrZkDH2z<jYOvA7bOzTWI79K4tXdRwRk-ln4GX<}Z?$u*XcI+>=M
z8&95W=uc-!7#j12F-<=~o>j4XHmjmys@&VyP#R0faBv&|m3GGXApt6n53LIM1pUHd
zqv!vMjz@ZLvA=(aaI80|>Wg)ma1RSX#!A<Yv>zcr#L`vzjoQ8x_a+i3rc&)m)GI$s
zgxTsV)d{FlootfhLv%yrL?@fCR9nRHp%QYImeGYZLmhC?DRKA%3Bedy-s3nkA#n&i
zrJbz-9gp>K;y)xrafl^|&6CrMqhVj(%4N!!h5y=pwOzq~yn6j|dyW6NkLO~NnlcVG
zsB3tP%*vz$&e(3g0*FI4g+NJY?dP_#roXXq!H_=z|EhsV%mRUg#4-^tP#gjlfOtX&
z8&-+*Wr#eFriSD<pFgAiIp}o#%)E@ge9<bSCgyp<Div>fIF2jIm7-K5g1&s|A<w%}
zI>%ZPm7f{&|I-A*7`W)mcyTD$jQPL4_j0c?|6jk_d$peb_wjuGy!jvKnnVMwE~vFy
zY29xk)h+%62IxOFzkJ!)(8-Q&V@w0BMNkU_(Tayg3+r^BKYP|%h<X`k^;O~?^78N6
z*4sBIV?9CpKO4lMN_lz>oRa|1?`n5Pee`Nq|4AZa7eqZTCk8aof13*0{o{ynG=VV6
zb$rxPJCn(fv^y-dDXNK<)YdsbJ(qxS=CS&ecR8)(N&z%Y8Lh_o`7=uAV!cEAjkz;8
ztuE8_^L~cxwb@h;^~GdU4__&%ZIYM2Npt?Ly(&s1_x{{Ny-z(&t3D7)N6yrGH5{1|
z-Z~U<u6yT0Ohy@dR26je<x5>@*O@q`V`$BXGQD0k6BYQ${ipZk%R|rAyLe{Ef1d|l
z(aE+DCb(7pZ|}X@-L2q%ceeMocGvR%KAy@9%f{In(DW?yJa3~ICxBxDw-Ttf-1M)$
zH!^2?<BHH=fDW{C=iG|kL(rBa!stc>5(ik~LB)Dye9bx1a12z-v&)2p0q~MQyWZ-5
zZ{5Z?CLWGs&aNRS%Rg(W6NAmoF_DwxvhTB~>Yr9E;1q{NH@UVDY`%K+vX_Du38NPz
z0wHk}4-ielF!Q)s@0rbA=sID-9&E>Kh!`{oa%|j|P00*d+Z(1Q%kE!mrV{ce$H#X>
zm;`Z{a2(cZr@x5_;|8>m8Y!>s2SUe5h<P>J213GTF$_?qiw7GB+0oEcyn+|=j1ww>
zA1E5RA+!`fa!do_E6JjmP8%{(A1o1w0}iG|E0APr373om!nSICYk2yHVDt>j$pH1u
z_M)$IU$74%wHcaWI<LN#8tiz<SO}Op>o`IfQMk$LMgam*2D!d4?kT&jiK0@JnZ|Vc
zjJNpg=L2KszL^kzVqIIA`xy)LjPcYB{X8wh)z%pNzM<JydN~mis5HEA5MmOY7z2IY
z{-I8M_VYoh`9gAofpfP$s~Qf?pn$edw=`P+ty86R)l&g5Fsf>c*yTUKmr9i|Fc0lf
zE@aQ=NP7odyQnvGKqXbj&Nxr2XxbVPs$JuP{HEJ%Dv;U74ZlvN0ayB(8twus6b8JF
zhc&kk$!}FAuD+jD^NY&RIG`k{br%A3Idvpz>iz3Fsd}duzjmzhNpp3}j3Ze#jjAcL
z4!22_K%#c;618_>eRO8b5R^$ka)PCjXJnMwL`OQMVngi91c%`?BWed)7?X!ea>?YR
zQU#4|ao1lm1XLtE_iE_;m;=%-CS9mRfc*(#ass@M{$lI${=@J>i62u}2vE!k<0kk3
zk1Jw_2;2T<PP=3Y4V<-X9?Q9=PPS|sTfQ19-A0d4Pm&1A;!ol$peY+BGyon>i-N>1
zmdHR1o10Z!v`dXRsDCgm2(U#$c|~%muF|h*0VS&Y;|5|@MKGaG!k<8d2f5de?w=k1
zygMwtM&<6S@DvdUYg_%(Y})F56%fTHR##EnQ|{z~CoJo3rUZPxc32_y0x_O3zGNy1
z2d_~g>p+1RxFltNTR}}MdErWJd#ajmca&xmXvC}4D<H5vW`u!O46GQ|Ls4}Jju56P
zzw5{pwaXL}4H)qmy#}t<8lR0R`7NWZMS?0+?{j2@rq*L94vk0Az||r=MI5wLNoawd
z4VFajm6}56h~*xtF_Ecy?6W9JD3MbGxF?s1WL#_pa1G(6AY%`6e?lbqGU2ePbX#3@
zs#WBE6g<gn8Ba@ftxZGoXa%xm1e6YGn95`|t*9@_=SRbf90R8YquTqGwOr&wpgN4u
z5pXkzTK&<>ymhEsuNBE<O2(_nWkh7g=|YR`1HEU^x?vn>^#~nPbbuoW53qnc9{|<U
z!c!gFZ3t4mzi9~6_Y(UDAhZ_YPcX;61g_?uFU*9^rf;@rSNiO7Y9)lTBOJa`pHUxT
zDK@Qa-86zA+YgB+u02HloLjA@U+xXJT+kh&nW*laFLjIMv=pT&)as$t{~A~`i_qgN
z>eq-ObfKA!K&Tm=L{TC&j1G@vCNUZ9=k2J`Xl{!B+N6HF5?5N;n77dIigN8FiqM&h
zQlo}#71n$w(m=J)-Byt19o{!Rt9CR>fC!O9M)kb}>z!^Os(sd(t0#3^R~EWdju%GH
z)S!XrC1}HSbvK#C{-hfhCBYrrI2YrfX6A7xZx8_K)3{CPz$lG*8yE#Qw5PO~ci)v^
zTHn*T8kg$_^?_>|BD=M0plilW4;!Q5)Q%mlr~-=Ne#%8#q3{N>OAe;_XnLylkx@7u
zxxh#1{&0YP={3&$-mf!qHnKu3XTt_<hU9(f*dl69BlV5GBdMb^XYDUtWORv2bGUSg
zkq|}_Q4*?2Ospx%?BUD;YCKEjU2e{WiEvN&eKaQ5KvS=_E`EZq0YynDNgU>sO@+$^
zxK{^8^IS3Tf=|3}Oe__-mkBI0uU*pum&<)oAz|zs`SPf?s75dwFqEs3i9|PP?_nXB
zPxO*nLID`rS?u3#qhFwB!ADpYDW?_HqoVpmW5MJ^Df6@|i)k^TcS6_>Vxa`BwU>zM
zQN0A9D8l@zrbC%(r|o=UHjVih=^BqP2{q+0P|$`RB_x%i*hf0v%t6!Y*cQU2L(}Zh
z0x}a=6*UUAiK0v_R8W&fd2%SHHHl@m%Ps1uNl?)1jkca}uGR{rT=FP0m|(~L&^!l>
zD*Zt11`=T{Ez@kDc?t4H4MtZ3igWKFRKJSE_d$qJ5~639Q?;8R0k&!nmh+iuDy5jc
zO35tq99_alF;*f>5jBI0&Dy9ywwqsON$U389R#+sp?Q}UEo?-%RWzq*?Rey%S&6zL
zG85e*m)-6%CRk4y2T?tV^HC3{rb~_KqE*3}g6yM{(~BdQ*uG#0Uo#S*m<d7Dc0quj
za09>;35XZSZ)0g^P3L2BH(NUhubR=(+{`|Q$SV8OW-xd$Y0AxVhCR_Gb_>?C1_NW&
zu!xQ+3Z@iC#7ClPQ?9oK`B=b<f)vkIwGjzJ6G~{y%qmlhhb=xCOt+U7@kuqVm)U1z
z!l~W#>ZPt%UZZ*rn&b1c1LWf{?4uv_Lg}>ZwX|Z{da87~uJ4GDX-!3IRny&q0VJdm
z-U1P+RfW1pF~%k%Rvd&gIg^c?wn4MH6EdM!)E?tge$sf(084OlTnqC9=Zw$bdYvX^
z_Yeyu32YR-`4s3tivlOvw!CmOn2Zpn)6#Y<3!$4p7^{_1GL*zhISt_&!UAK8XQU5(
z7uh0uJWu~zkqW>k0jSxjP114#(}ERN5}E+28E-W&VWK(F=tG6kD4!~Hi3R9GJhU{J
z#(MO0$2hkhI(SDLE1YxBu=o`~teBN+S)c`r(&ie7GT%?QNQa?3sWWrZhnQsxlbus$
z^qRJ%nZh0dUcd|$fe_hY0oA9hHrS*kyKevzlQ8qZQhlBi@Ra8ow$V+TsMs!>mv)s+
zYuLQ2Q%}goW3YkYB(pkEJ7$<rB!CJc$u$(UPsb93W?N*Wa|x<-m~3Bu%&^{IQS3Ii
zQDL_1m|5!<(?gDYm?2^Egas9>0}#X2g$`(jYw>JeDqE&Pm&LQN1nKI2lI&9=z_qG$
zT|3)X$`%EqO#^7Crm2)ua&=fbXD*bk6+yl*3f&E9&{>2z;;whW6X-eCStn5x0k%*O
z)j&c)R9zNrt7;vMQ|yWi^-yQ**2z-g`ix9<KRW}^;pTg@AZ2Wy4pb4~(K-`c`s6Zd
zq-HUv&I72YTK4I3DnWGDAq(@sL3S}6GMfhuiZd%Ya~8N2pe6-UpZ{pM!uZS^2hzpz
zdK4_b6nrWgpmB1lK^h{$dSJBO$;^x@ey37ZqGw4#rOjq)A-|EMnH4IXp)SERYrCx*
z&^9k)EG2L{K>z=<kAME%d;VX~p8c}r{pYWLe)h4i|M-vR|MmR$^v9o{KY#Y@m!ICh
zy*NAil|29b7n(#@=GX7feu1N3I}&;R{J;KGtIDlcfNrWCALE{x_gVaRVRT%}WZhoo
z=`Px6%w_cM0)4wrEWSxDYsUatvziH{UPB|@D8WA@B=Qdrg<L}*?+F6AQt0FAAdjnr
zI(|zK$FCOJcnK04eB%>iWh$x}kS0h$eOa)ejt<EoW%_urn1i27_a|uo?6`>iGQ*t`
z;@|_hR?FTE=2ZLD?3oA}ccw_kj0(FP=EMt2x2-U<k%pq=-At)wDyUNVHA+pO2<s`3
zwyjvta&d&wzZyCN)N2U&*i6aPv7ULY{~vw0cr%4cX0!c$IKb&Q1T$R?uyhS2ZHAJr
z2t2xmi*|vF-UC4NaX~`AH2~<cP|qbnolC+umj-Hny^zcmfG?MaSuPEzyhG^ZgWwgH
zMJKKTi?}@UaA}<3vZ%rpVhHa5F}N%~aCtP~9|`-nVzl2~;rqT}MBnoGy%nJKR)Wo2
z8j1I{vfE?A)U66Zw<5gU^60qbv2ZIvzO4x7_Kl<3R)S$$9<jDOK5YePv{hiw9yii#
z8BEz4J@%N<V=KUltppkNFssDuDlD-`EQ{#+#_?OLKx?gx7nek0EzgNdqpVhhsah66
zwJct0jgDFsIx4?hBZEg3UbW++aw`P(eTXFlC)M-sdd8cX9%-k4`ivS(ReEu(xwGr%
z^hi4Oa(!Om?DGnJV?ey~QwwwSOViPXI>n6h3vF!;UpY=O^s`d3U(kNEVVc99Z+MVh
zo-p6xh6P-Ok%}b@#bNQ)EHud>NZ^rn@1;AECTmH$<&YE3l5rVU>#~C8W@mj9V0ym>
zk-}PLTnGf6&;ds&UnW>?uj`Ye-H-R6E!$t2BPYKe(X0;GVfiSUR<#X8X}!X9aRDb$
zbK&f#<@hs#-PKAYjGw|<?X^W&3S$r?v~K24{csM#P$Z2xAj)Wd0)OxbkQbFTZhgR)
zLr<<;>DfFM<%DV%-cic9OpRrkvyiN*kZqPcXlV4yYy>p3_Rc}==X>S`QFD=Lud1MB
ziPF7|(`=neQ)4s`D4t9O@p0G`_{(Us*;Ci;3S!yMD%Gj*N)e4!nO%5AV5g58+yFF*
zst%;WrLg%+(~+GRGP{tpi4n7FMQVU>+Zvlf_t*r}Ak<=`cI2Fc>zY6u>(lWbE8MAm
z@347_3Rjacve9%<hS=mww;swXn0jU$BOIG;afR{H<+xH@fsnq+AYIb)qrcI`1Oybt
z6pQgc6MfNH0Zp;kR?Mky=?_Kias@FgU87bWjn4Z=)pgg%>$^c-8wOeieyu623WL4K
zUSyR!kd^N{9_Majjq^_X^saXl_aVdQ*)^<cpKvETgH`MWz6tIBQS1Bb5QeWrr~m4;
z`0l=zwRh#=y(>nB--COlU`A?mu$VNnTr9TA%|4d=uNkhDtWHZhSH8OA5h^kAK8s?t
zs+OGHd9^9h&iIyU%@+x;x^Qeo$?Sc$YiVuJJTl=_)IeHMpxv#&^X$fT==}<|<c%Ts
z2gBoZ-AK8}!bdbT)}e^ya(mvOZrzq8%_l9#1!z6G3<J-qeF-6>W3kNP2F(tu#p~P!
zyk0e%r&xB&R^6I(4kLYqYD<geXp9MmTed~ZwM5sUr8y^+G+&ob*7i^Z`(=)(Ks`pi
zfQYM}%Wac|I<(KvM_`4hIu6!8&$Zj;5pMBjM5&j8)bq(?@T9Fap-N}X4l{8Z0Gbi(
zZRV|7J7$}>I;>6k(`w4;qDVPtuEaRzs_Tl(W%G7J2Lqae<cdsc4$9q)Y(Frb!iV*d
zNoo^HjLdh?&Fl?z&@N6Si?Fn0TnOWX;c*K|2^<L$fRBr~<FZ!Vvjv(-8Z_V7<TGyk
zIe{Z;-Pqt%!<~3!@j@Ro;bJch@=arpiyct%Rm{Ux=_1*Dj6>btiJEMlsLAe$+9B&M
z`zPvd18v=SINChFAhA(Y_G~Q&$?S*+T&P~=iOcy9y#;v|CSyXCQu*w;L57c<M@8%D
z7}#j^=J9Fi*M$!VNh7*SW`bvo=R4EqjtVzSW5jsv*gqvp{*efopOA(NR>DR;t*Cu>
ze@aQ({vWkTy+hnmIYZ@83mqSjruamHUh(4D^3xEjFnh^!^OAbfb4>DncK2#_d}Qlj
zqa4+C7pIGK?(kxAS9hE5wzC@qLSF356JLrvZen_yZcs!ky$EmlyVJ^?+3~`(hQvl@
zm^J1-3ucL!VI_Gg#3S{0IgI6I!U~W9M?a;p)LQ#jBVx}~`}e>8_YWilGYkIxum7W@
z&cFZlzyA_4|LWiW`ahiy<SwH@tZ+1ydn!zg3$ZQb5q43`#=OD|m?9j;6Kv10m`AKH
zcH+yd6J454lXWzz@qAfylAVodByhG25ITO*RJ5Z68=0Ew=sF5G^?z&SEFhy1=o2*r
z=;QK?N^Vvb>>?==fAXRj+<K{2XidZieNck*>QTXqkIOkYrew=mNarxB$S<ck%%vzS
zU?8iW*E5X4@6S5!v-lWBj?5Zvdoja2ISD<r$QK(4?%I`+fN=1QSEG2);U$<;B%E=4
z^QpQoOeOR|S>5c9&03%4?!X>MQ>g9)$1!x*P8^gM)mNH~ZRu0uzx}i0D$LCerE|A9
zbLG}8)mG5iWj{S0nZkH}mL&l*6q)S~5h^6$phZoh2&g0+ve7lN%UG}q#}QzSx6(|6
z{=ebr$>v+uK+=pC*2e(okUNNg$`@LGm=lfk$$>-lr5|BRMj&M0mH}M+vh!<`I-r;r
zZgCWc@FI1@Whz)YhlnuUkx|qF&#|GhJ%D1C9vXh5o2!;br6*!*!3)V13{X!S!1HQ;
zR^0!^b>WA4o|#hudn!@SR4y}*78jDdlE!$z$#@LzyC0C<Ch7B?o-2_~)QVgnLG58Z
z*%Do=^e;QVHrBY@UuqqPTeM@g=tQVqdTwW=m{N&vRY|_mHkx`?AM~bY^R-e0lyU-L
z=%suA8$4CLkPe(Z&J}an%B|TEf2W7115-1_P-B{&aWx`J_L&2}+Eoi=%%Z7}#Gha~
z&dwVgB{Jc#*bxnNOL6)*EXGyA@nAOBj*X+;&MACa^t81$uI=nkb`AWRz|H0j<5z@^
zJ;j=yJt}EauRohl^gj!?MK54o8&q2D?y^;?9I?4jqf*yG_jT;)Foh{q@>VpXOvW}$
zCL&OT1IUlgxnovV9jcFo^QWH0?0A?4>Th#YsXtw)2NTk1`hGY*ydMTn$U<|qam(9u
zh+hLr47reEsOi{0udbFmTsseRC2+Iy_Xocp^k8^gG~~OgTQlvi?+Bgi?6k}<(qR5B
zpQ2W_k$^pgDRbZFW)Sp&l3VB6MwtMg=|dJ3MW8+l%%P%~B0}Y>y*@gnI{%9lF%~Js
z>F<I28q+`jFY&)l{%*UjJpW9cX{l5}lsdlspRc#Pt!-~>+d*+_YoPxheYiMiJ{?Zi
zwL!cUVQ2aCU>BYi&p@-=RDGn{*LEIS!wSE?dGnh(I}JbXdp9eKl4A*4-@W+<ynD0j
z@ocRCXjh9YBznOU*_;NwxjDLaOxjFFc>sQ%zmhBE=B3ViYxI~dbpo8rT)zC7a86CJ
z>nU;V+LJxIaDcYvQmkhA^V@v+q}hpIkQuI?oQW=3tQ(u>_(U!4#xJVI$#~H0m`mcm
z@s%otZOlQ4Ih<bW3q#itF>^=6tS}PhYmb0gN50%^<jXqZ<uOORtWRdSqmx-I%Pe&^
zi=nZy(^=+>O8Saok=7@om}h-##Md2D^fgBjJ&?+|K0c>oWY5xZJS&LWSxJn}91%IK
zdfYc0fU|VC&GNxDk35uSb%8VAZkWtc0Wr&jzI>fQE=z{9Jm#Bg7mZ_Bb=1PrF$&*G
zM8ZA9A1ohju*%qiWg`hz6*sVs5~xNAEENy166F7K82@F_{7d8ZSAx)A28+K8>V6q~
z{TfL>cjMMb`Zbb%jhSC#=GU0{$9MntY!lfZ_73o}Q*jy8`qCKnWfAFLDgOMMLz}N}
z-~Kic<ac`a_MGVO_5ItA>Hh7NV7Qk>Y_9~Ly}n2LtG!42D@8~zjfY+q{rotv&X4r^
z@6Vq-1T;Y2moFRNt)KP>|CVqFh`926K|CXoHYG%{261hwmxUzRwH*B^j>4{GY;A3A
zz1rK;|88w<RsP-GdHL$qciVffcXxJPnRGk5+b>^zhqmsv>E=m<#QeLhrOT=|?kjoB
zR6B$?WYY+!tX%C9i_Pop(p@bE>iYRJ>i=vodj+P@#`P~>Hj36ro%9?+zykWY-SNwp
zjnAJEp?;VIfO;8^^+S9Kq3EGL`dwSysYE*_wP)5~N4X}CrKvJX_BR}bIfcEHf|3g}
zh!rlQF>NW`PSde~6w}5b4vCLNQ;((JO-TYm@MXGhjj;45?{w2r0gB^zcHgJ7*HX#G
zu5*9CGIZuB(mbmDWR#`6Vf-p&I5<{BiJbNgXz}>4L|#=SOWG$k?PelifO=Bt%_aIB
z1~6v9yCOr_u_`q1`#IPlX2E`yBXq?pTrs;8RKYq{x{E}33};Cg4#DRj3q@7Gl*(($
zU9Lv01I>#G6Y>P4>i(udE+onGDGh-5u<z@=^GQ`Cls^}!<rF9jU|3>zz3`We&P)tY
zNN94~IzUBAoktvL#5+&uDLpWx&O%J#jbb>BgHT`IV<Catchurb1cK2>`)o%DkMwm`
z)6_F3z$i#|WUci>pl31;QP17K8I3PrdZ_;#^@{De03L~6c>o*bR!%5oQTrxmxTc<Q
zvWNZ|3cXKY+$p`P{nwbtbY)}B3_tAG-salrp|(#A{Rsp~Na*-@Oj-8&=ob7$)*M8&
zo~-T#JR@U|Zq<%g<kycCpUNz4Ykfhi<t1Ffbf9bEaTY@PYO>AL{}Ze14!aVIfnzm8
z(2+*ZIco<raFjfw-jxCAT;m7}_vtiqR<$OIVon$*a+-sv>|V<A&GliP&xtHtM<u{d
zbOuHx+{%391o%FS;xo=hq`dz#JDKx@N)o}LiEU|>Es}-6tCGL)at_IFN2I<0$GOmM
zT7`3PLUEI3G%=;2=ZH(bVaI)f#TkbYxkbIrUU`-1`+}V1Ig}2<1d)tSQHdXP;z3Dn
znf#Ynz&XSWefd)R)<%0UE49R9B?dP#$<wVqt1GiOTu5JrF&0&SW6$$OfMvqL8>>Ci
zn+q1Rkd3E$p?L8lql};Zd=7qyNo1UoZ_0X1Mn~_if<OtMH-CDze|UI)G#oy6B)opJ
z<9MsMm?iSf?v`+T4FLzhJuUwTqq9@w*D}9p(%BtElwttflM@a&5O3UzT!BIVs?%SX
z<ZhC1D>?QI5YbEZ*QP!ck`rHgvN#BiWJ-#8I40gdWAWzYR$Ge8gbVp*d&`wbJ9j)C
z*>sIVFT%HPcDJHpLZH`Gj<LamW_T-dQ5z5kNNu#$|N4UYSA`_k_Qdgo${Hg^>a7W2
zR9P#8O`(b$NG~9~w5H})g?{#`nq+BrViQ&-4f-8XE2Xw~$}^@>DyzrGF}@@raYoi~
z7T4G3{de!25)Vs>{YhtWw{MfLT-Lb>JB3b`ba5%SbZOn>n^W3!l~t)w+TPi6iKY9I
zN}YsK%0sgyQb~C1xCBE*c<hza+>cCXmk2AD2Pua=yf7#po7gH3GI&ikO@?{aRmp}q
z3K?|HHn+^U`&x99C0)hF{m6xOJ*q)u&8Lq%CJmuw&a0<cTr4IL3as+*LV<%Izjam+
z&Q0o->jzG{&ILP7xwv+)WLc}7&(4{4ACvs4H_@(K&rA%D&_sZz@jh>~ck*d1LwP%Q
z4nDgEZsK2#Zey%(w*LW>FyY2PSf!9FJv)0&0rCfy36|9!Rvv`p8Yl?i#hhJ27m<+W
zI8zx`D-~Ku*C%T^@q)5pRV8+j5M`rA6N8$RdNgt?hDZkn{yEDLp-u7?<E5fFkuvtu
zgEHQP%*Ub1HgInM%1xaB4&~&GahX}~YF%tg(J8%{aoMo7m`S<Xm4@*3o1I5Ei%X5U
z--+DH5J2%|2p1fWM#O)QDINo_afX*pi^%8wi1?fdHj;gxMVt6aZ2Eqz{^#LDGPPYy
zgd7+XcYkMRdwcu){!Vp<oh4ytkN-f&qZ2023|y{|&WujX*=;c%!2+kNLs>0<w)wGz
z@noqtEXx%a8jUn7?;11fvP$0M26PfGRW0UBGM|M5ba8NY_iRy_Lg|#q?CM>ld~Sqa
zsf2GJTbH$Y!UZM!vL$u2cV9P&IW~R=*AO<CaZ@?`r)LMl<4;E?hi9k9Cl@aJb_9|W
zUu5gXR$u>LgWR^M9o%in1w<&(;Nfcl(xWVZCL54VxqppGXc%!i1bL!zxJh3}o}9+e
zK<+xan8po;a)Yf>Tw2U*kMyum3YU){WQh(A8<DXmw4cbU5-HR`CqK}sjZ^7lZpyj7
z-I08YcfcHN=OqHThsQvrqwOZm2LXIvrEn9<DR?3ojmWKoP?C}u>J)B5I1Jg12T?4i
zr5<Q95~}1!D)m9$^d{C2!t=2|0Z+=%vmq~yoFc@5N_%nf?wAg3cud1Q(#&inuooE-
z+(6g4C_2ej=q<IXlxxZ)go?aRXj8YUBo`)yt#Z)7Kojt<^ig_Vm{8AWVW^!D4)cqW
zXk5oV|H;6z2XCA`bSpXD=VMXVz&?LYv;L0$nJ`(?{+vRywxo7mRLg>_vecRN%qFRP
zE3dV7rE|kCW~<Ges@kT}y6SCG{5G@RwcachRPNQ0*@It9IEV=gg8_P3`mVJ9w;-!J
zLu~Zmv_?y9G7MyDfU>PcwX6lZuxY!IQY=>9v3VerNP@#d2=Ua)k^$N+!{+TiEBm}%
z{u~1*EO2LTwod%dhx4OP2j@qJM<*A@`|m#eaQyDbWvlpsGsg*FM)JPL@lP;y9_`|Q
zn`%wwfP)4K;_wF&!a+)=-h1lNcoxM3j&CeB$Eg$!Lany3sJpn$FbO5MgU!w6&2D{y
z+7(L&Tc4?Y0_yeZGt*Sy$BT=z;it3n)BpaPyZrh}SfJZQg3YL5mkQ2bzm-&vvRRco
zIi0U+DaCFTD^G;Cr=Nz0KYe<4`u5Yiqo0r7buCl#^jkJO{OMh;QM)>zD72J1f_nQZ
z>ri6<O6w<$-C!zsbn^4@`RU2~qmv6gRnPV>erzx;g7gb#0Bq_i3RR9Sxc?8q=o};0
zSp{%b{`BJL-KXKv`On7(N1smi-#bN2lh`emqy8QmaOz0~yj&~q=)ccS&o7S7Kb>B@
zJDVW^x|Mu%tB=;?N9jqfU3jc!b7<My#aXg4jXOb+R5Mo?#z{z5)$^;@>sltkG(gX0
zv-orLtRM(9Kv?bLBxk5Mf`D<{d)_p%LR4>#s5U`}aMOqS#U~taa7x3eW2I<k{X&DB
zb-mZB7KnTCRduwh1;kfm)5o6ViIAIGZ}w&FR;qbBW&sOi#^Dd)Mlh4dfxL9i3cayB
zB-~!<QO@CHf2Bp%4-<=LPb!0EJ=AByF+M%zCg^pe*!y=ktK4ilvoUp^buh^SGiPPh
zX`Uf7iOrZUg@!(K)K~t@75`_|m3d<SzMC2Ux3%?hZ>JLfx3lwdcOCzCA5SsduXcmN
zhKUY57#`cpSy}@D%cjg~;GCKPz95EByDd94QKLdI_dMvPG=CawWq^L^QIpv^6|>-&
zj@T*HicucBTv1sqI>73vKMdb;mc&NO(ybhc!kYn78`6zpw8KM>aQidY{MSJtH-rZ4
zMtDjb#+>;e#0-hhKL590zS^zE|Gs?vYI{BZ@8c;d30dH#8R2wS_PnG%q#qLjKdJ@M
zaKJ$pp`vG())Z`LF@}iIAuJGCoE8;`llu%TPK#YWsyL;z(vV_vsmD-qEMaV8<&?%u
z==g*Fl<FrDzWqS4@oa_Vo>ddMU;dsdQ#MAbNN|zJWY^f;ZD4Y}#K!ShL4<ID)E$Kf
z&lh8>Mzpn}D-C7q8og@^Z?4tC!Mnv6(&l+r2#KA8ay1&Y9&KH$ewr?)y1msUtWhtf
zm6*oGLj+e94ViwlEj*27H7s_LOa0oGpC@!*d=S7*OM535X#c~-kEiFy7k~Tsarn34
z#nJoJX;+FpFVIn)dC(H@sJ?%V;Er5ziti8SQ7`l^?28S^re4f$fQt!)VIOWCV0pjx
z>I81QV+j$`|J7iM%)o&>wfjZ~gO4AtG5`26B$ppQDwz|4{P;1}*QSV%9~*ZhA3q}R
z2gdzUMefXO)E2X=r@pD2$6-u_<hT=3U1c;osPi=2YPox60d<yhWmyo;bQh&p`Mrr(
z)lSDbE>+fTz(|#W@v{I=mTj|AG}t}Ha`NU+&koOze?B_@bbj>q)A01*r%z}57eBga
z7>;+6ID7Zu?eU2wad>>*A)>g^!`s>W>CnV%Bh}PPXJ_-|Y(NRyyI~z&;;zjS(xJ5m
z<sMz6>`!)}rXN2#OZe%-UyeSVoE|oNxZF;3eOh6I_dLI;LaUZ~wiIr(MV;ioYl=0k
z1ntKClreJ4zJvC|h6;Su_|ZqIVl;`|jFOol9R+O(jH)-XD}$jbY9x5`r)TB4=t{aE
zn$rd)8H=PBl8CqvktUT1uzjb}xQTHvCoy_z8*MOhB4pB|NmT2jH0>dl_>hRJVaVi3
z5-pB7)l}~SZQ4xuo5Pvvrp|#dwI{`TzcE_xGW+p=7;Weyi_R?CZ#`?kZ3<=`Tlh2y
zyb))SN1`&IRTn%qfa&8ywLTrcKO8Ou4o%mF*~rju1dWysgd@!=QE97Ih}KxPZyn2a
z7m8@n_J6&-n5Oy-qwNj`AFn>H2x8YRNS)Q4A7AGx<Q~9vO~pPKvhEIp+wSN1>V^Hk
zbD%)l{l7cAyIU`-=Rfbhe!cep-pA9;|65qB*8bnM|99>GUHgC6{@*+B|E|`Hdp8Hp
zRt{6iYtk{w;9&5vDbB!pGy>Ae8MZ#7Wx+FA=Jr-q4r+0panx`qiZReOM?T(%YwBR2
zZ5d93#_UZ%x$>)Wd_3TxD%E~md!rxD8{O#RaGg_lk1poBopg`MvHMN9U1uK^m2yMt
zSy4S_Cs%o^wpKUNb1d~~_7YdlB2rAegv?z#oBwc!6|MclYya@tKithfoH~0wLPyN_
zdyNgo<)%%YzI4RY`k0whz7{9)oQL+z+QvAyvt7=>$=~1k!8etUrE_J9Uz~@@ylOv8
zX7>+wn9M!8@0-==wKIP0j9)wB*UtF0Gah}FyI^}Dh+cA93Ak++_U^aasW%c{Ok(hA
z)44$A<H!C-mFQz38wtU>BPu!TMd<y*B8BLTGs)YX&mslbtd(3(keq-3y;uu`Ib>I-
zYmZ2PMvNn$MKPAdocyY9)So`(fD%zT=H`jH0MuUGubpiZoL<JRUR{F3=-Not^gjNB
z;c@K{==Q-=RF)XQdiM5VROxpX8OwUcSpzzMQQ4?gv(9Vwd7P&Q&6vAwhs|`J$ekzg
zoTXJ~^c=H!&XVd=du7vlMN@j7>AcLKmTAp5uNNEMGL?BJ_@V>tF15v6+*VMhptL+N
ztGvZ6AFoxbl3SNpyf$+c?$kS$?uiyBN?Yw}Cy&igZ`$fv({-B4x?h;&H~Y+u|D5~u
zui5y|m%Fbk_|NUv+ppI6&--{P`&Dz!p539Y0>fz!?z>+Erzv!K{HCGv2SjhyN9}I0
zoAvU{Q?;freibqt9BX^6oc8^Y0F}pwCEBVMS<*hSX*UxA1Jo-Ay3HQ^6+lHZLU#ld
zt#ndmNwFBeyr}9I7qYRIyIhT0x8*B(c9u(RT#JY5XITO&Qd3VEwYV7W)#UApOV#yi
z8mYU%q*_^WSBTWS>W>kR+Rz&-#UwvYv}>0$wbxkJujW2Nz4Wf=Cc>FM<)%wPTJ9k1
zMzhQ9gY8x}Gk@1`)-{}U&Ka2B8C**?H(+%J2e0-{-9<2~HBBftxoldK%Vwj=<=!s#
zT?CZ5xez3?DmB)C%rzjhp8jqCnHD(~10Q)TmLwv-Y36-Xo1`Y?8Sv3*A>B$ZbzH+d
z*D%jV4f8ZJ;c<dIP2HLxo^?c52c7+~ph2Bt^#N`~?6l39`!2+VH$3ZG5ZAXLuEDBn
zu<9DDTC3z8-P72%#yaagKWepJ#64hE-Gx5R<D+6uu1N^v!j(n&v)q37ey)UUGk-Wu
z3!KGxtan=j^cNCn%!gi>oK?_y^myIf&6H(A0bDyX2cUR%MlHltY+fc}Q>X>f<fsOZ
z(9|E}+3y`l`XLq#ZBm5vXV*+$U$%MYRekiAZC34Zvyie5Fl$H5+5G0uverHWaMmJ~
z7O&z$HE0k@OLtTTQe3QBjh5Z^iY;~jXp3l_QEFArHlZO~<nN3UW(wn3MK%fP4&^!|
zc9+u1lKgI^`1*3!8nNz|yM9&3)DHO1^s-H_a5wW@AkZ22KW@EzRlWapcWY~JjsLul
zr?T(ME>=yqdtMF#g*ar>2<QSR(2Q*Q$3f0Y^gfZHZ53G_FWN?Zr6^JkaY%eDI(KrK
z!4y3=9<<x|>Cl|)#$J?*3v|QiQ;9ACMVMbffUwY-Y!-cUy^Rje4^22vlA~HRO+wL=
zms@)!+Fp@12}1<8L?S$rz!Bywp#gf`f2p?Dj0QrLLZl|<V^xt6p+Tu!!H}E~VGIUH
zOjr^Is=8yX(QqUun5zFMA`zkIs_wZ7`K9X8PKe%N!pAT`Tlt$3#@Cp)+!)@w1>klW
z;JMg+1-RK6<R8VctM#fa3PwdbB#kHZlv-kEA*P^j=0J>_FYmFC!0kI4PLae{AP|g3
z;7hF!rr=K^5M>exFkTre=B-Ohpl31;ONfBN+Frn@_E7&h>J=Mu0X!1DGU~E4YHmX5
z@MH+qG<VYoIn~F^KSV~VOB_Yk`mZsO>B`2MRS~zjPRQ*&;)e+*bUgGY5F~1*9*-%@
zULW0ppJ+o?NuR9sWZg`srSZ{i%t46i)th;z6qf9^);l~wp78`}4=`sT^veussd=%=
z?y$DA7&ul8jgD@Ks98gb7oX2r@5+F5u5qOEEnn5zR;3v#?T3jf^WM<Xg|7MvAkzyh
zD~(92=8OKz%FQa^SM!%Om^b&_K&|_((^BV?hJXX$o|bQf(WXnKD#<GFAD7nO>uk|%
z*MV)$7K~w=Q>RmJ-s43f8=mKFH0|Gh)~4F5f=Yxr_H>R^rOjR5osx0Y=&SFw%<a72
zb5$eXFqE`4q!pkGrG^uMZYEfw07is@FuHj<d}{N6(S)(9KKd(>6P8GmAS4uYtiL7o
z4|b_2`HTt@0EYm@n9DShpIbiDiF*?WqrRAIDzd!+ikXlep+e#?+%QHFr<dHeB!Cc9
zE83XG)f44>ic*X@jzC(uN~q64?YME+ooG&?U&wDdypAB~N-FLBx11$$1~e$WU8ss>
zx>+SNK_v0GVV66Du*%rJt#A>*K|qYlG2gvZ-!&|;JC6NKY6g6~Cczo@KYodQuN(wE
zzZGzX{cmsQ)mFv+x3~3jXKnwxkEgPJsPXRm+UikQCJv0gd(J{AEe|?1PUM7fi<0iT
zK<J!Se0p#zfm0lMF=y9Akp`|c{W-0DJPFPE=^-2wEm6b({nG3Gx>3;_e(A-k4MGBy
z)~RU|T?4<=3C19MFHkQeLjQZCwq@!M(>dy|IDMtXIA{V3l<bF?M4gK_@#C(t%1gAX
zWSc@ek~%iHW1HX_s9c~6ZELd5T&P*TAZl;8(grO>ut95bm1CLDW@s&Ol?5poK5N7r
z<@t>9fY9Phca^0Tt0vkR7o^>2XHSV6s*~(jqwLnj(O(D+2p!*rRI+CiWdiBa7B!zt
z63OL1z?W7mnfeb)HbmV^bq%^~XY_0K#V*bgB||N&vM$IMm&z#Pik8l98nHWFKukc*
zBVIk4#rMjkkj7wl6`q8S*y8f8qx3PO6V0<!tYm?xmA)w?mdOKEf|JWcf@oQVAD85P
z5W$;G<Ug#`EsL_pD{@nnLf*a9b!(Z+sh3VY+1kGEOBq{EA78l=nD^goftZVsX3@B8
z{Tifohr#`$NzLM1{KE>)nn0REcHXb(<RHjzk6&4xS9~sE;8?1J#pT3(EjAA*kGl0M
z3+`hRFk1t56zH6ucPvkrn4sT)AT722p@gU!hQ=YvIww6zLRWPj+1R4${o2r)74Y1A
zjY?PY$Ins=3|2S3`usWdsy(#7<Xd~@_y5g*2z0yuZ)<z^)n3K_xASWI<=X#uAI}W`
z-@VH74B@vr5x%sU^^W{f545=G9=@AprFanUy(}m>x2)HY#h<S7f0-b#8S;N`cc*&(
z|L*JU-L?F`kEakv+86_NFW`^{CYygfSj^n925+p?(y=y%->)%z^#v|$CCpi6rPb+d
z-Mdr8$|a#ztVlJ7l&w^)YLvAPY3XrQ%7hDK(E_dO!9xR-?vw2*{qpT_p=-d`D*hck
zGxUGU71(gaf=KXL_Mfen)$<=-ZNFUW|M&7#<A*A?;#}FUoWtl8EbTEt?Pln^Is9Rs
z%cHto994^1YRYEFdn71dzSvfaSv8hGahDpKbTf-Cl5+&EJnFcW^|P918TsGU6EIW$
z?^W&pd+Ylj@9B9k`Jda1*OGrN`Pa__J@d=|`8@$M<p0+0?yIW)zqR)N-p@0S{r~<J
jhbHSox20k&xz^A6SwHJ%_Va%O00960Y?v|D00aU6MTDi&

diff --git a/charts/latest/azuredisk-csi-driver-1.31.2.tgz b/charts/latest/azuredisk-csi-driver-1.31.2.tgz
new file mode 100644
index 0000000000000000000000000000000000000000..151ddd8c513bb51b3d11cdba37b0bc10c149fed3
GIT binary patch
literal 15111
zcmV+iJNU#OiwG0|00000|0w_~VMtOiV@ORlOnEsqVl!4SWK%V1T2nbTPgYhoO;>Dc
zVQyr3R8em|NM&qo0PMZ{avM34H`;&eDG>C0VS7hKQCIi!9LI)6QoD89mK37w+1Yj<
z4^#z`7*zo^0E!aZ?TC4h?|Zp<k}q(nJL<x#WSg}+ZLtbS+!BdI<}U&Gd&H23`JLl(
z?05`M5ZgH!LngXY82CRd<LUK!y`zHz^>44&EB@Qt+dKMU_u$q3(b2))-rnvHz1_pT
zgQFinZz-iWJP{X={m@&utYYK7k_U$P17aLg(g%~>Ef|K$&)x3+Zg+3XL)>LJ6zbiv
zWEUX$1)NYKASQ@`fuIbI5I83Su_1I3cyTf~f0?|$@}m(ZTLcEE4{Qv#H7S(&*uC=o
zJl6R?fqsPe(gZ;L{NH`Gd+@3_{||RJ^M5T54&Vs&w*a_>99^T3_CesXZh&1zIUS0w
zOM@+t&RUri0ER-!v7l_)2RoGWoxA83F@gl*l8<(BT%~ddIFbTJPjC4mjC}u!`q-WJ
z!TIoliYtaVB4P^wm*Xo&Cs>LE#M+f8xi?HRWy(D4?sj`EiaZtqy5m{OgC<9&u!HWa
zR)t+7j(?w}ET%K$`f_)#xhx+~5J8+@F?x&I6&Gg-WtL2Vd)?iG<^l=z(5Vt5*Jy;f
zU~q<3%FIRxIV{eeuR>#+w>V-G?4o1Wr4bRbaF-z{P#*{uA@B_Rb&QDmdmEUv0P4gX
z++*Jdx5#Aiz>qR9rBN3QkN|>$A@n%{cqm_jdq~vFh$H!%0eVlmvOG!zqrQ(=A1Fpi
zr$h3^;Sf9n7cfA84#B|G!&F)l%~XOiS%hbLw@6cU+FaB)fgvALaZ;#n{C>geZn0bF
z7W-c|BCiN+ZDsl^`CQd+lAKQ??}U;e9u1Jokhn+*I_jeq1zvS(9zqxOfn-64Pq{!!
z$oW3KKMO)JJxTNQ^^k7?fC#+x(G7#cA$H$E0!OmH;;$n2{)#fu2d`fJ_~Vx1d>^}z
z_kk3B0TK+mT&LLk&!gUfeVUFD^u;($CiAk0T#|Q?i)_j2r5VC29}<*)@-UZmKAu4A
z!&~fQF&!XrK|RFNM3dlV8lpbvbhZG<$k4x1c8A!_m?7x#KG^Nai5JVf^2eSc#rcW+
zeslBooD7gliTvv9$|lm$TQos_9~{cgd=LyCvk~uuUw_*IfC}W_Fz8}3(#_Ys?WNV!
zX$<FGH1UW|efAJiCJ;L#UPv(!eb5;T5%za>eCk4fOu6VE?C-vkEf>^B3`#YZ>l!%V
z4o&-@qvjW*KI*0ttBdJQpvIx2(gHw3nVYgc=$t)ZE_nO_4Ts2;C122iJ4RmQqfRUO
zrahq?(v_FuEUB0ih6Q$^f9!db@Jr%P=cOqJ=K_g)%I*@$EykDwj)cHu1Y8>Vo|HR=
z%RMQUQzif&MH~<+fQLdvJU|I}H#m>8OOAxM$mf0V`HN(1LZ~pquiu2!dz(!WQt!Bw
zNOtQ0`N&l*)0BooOt6@mpA2ytF&7!GvMD!m{s&m__?HwCfm$dJd%btqyk+R05#rfY
zZWzg_7nHK?#kop)%}R^PX*DY?X<$|;(OlZWf~8qRb9G_63l>(;vscrHTS|*q;X?XM
zGCg7w<N*%~sO<&Zrvi{DxJ3+vh^d*g4Yab?olrjtkY?4lvdJKbxR8_k{{=lgi4?t4
zDBvmPcLSe_izw);k30&cnExM2QXQjWEjM3BdJ#N7{fW`w{N3pwU1kFK@SZ@uVEU*J
z%1c*^wR(SRE7qa<Tb8vfRdFn;))oNCuB?jL+bGjK&1Q0GCHlv1tV7o-^0}f<avEBj
z8rT~)b1f_?s>;;VgGH^YAnk4PzAW)8WPVAeuS(Q?P_rT#10Ql;sT|p~<_UMzHxKzp
zHX!cfQ~6tG3n7C65{M<$!o+1LKtw>l51x1AjOjcF&p<LKfHn{Hf&R7)I;s{O@It=;
zw^QJuA&h*Xwolq-cop6H*ad1fZUacXB%3w)KtT6Sr+%6ApYHTGj7FhUSFM#g`|tC?
z&H2R}aD6toe1Cm%2Hsp>zP|!5&WB1F;30DH5F>9p;jLuT#|33ljUYgb5#VyO6Bi0b
zvQz*$Fuzkv=*yI^xv7?bBiWV!iavOLho-x)C(z&BzC+VJ`Pbfa&4QkX<*-0M!*yFj
z1VzM9DmQ)_s20bAr$pG6mYeBzNmiuma@<v;Z>%=Yq%^}p6vT3u4vhk@yG*ecPo=Rf
z3+8fkFhQQ$Br{K{UV^F&023}CaS;&H5M>7Pg|jPrr6kqOR=|z8puu~N*zpJ{tz0U6
zQT%%l4Tt!l4?35Ffip&a(1|TjZ|LCkm$!*Du3&*q=LMlsX!Dob;PmV-@84{L^NXJ@
zx4~bJuP@Fo-fV-j>+8#FsbmTfN<scGHI<MrvcCyUe{K1gL=QQEZq^fz+cqSsi=F`w
zqJR>Pgc_<XpcYFXi9XnwK(^!K+a2>p@7M&Rec+*642iXQ`qMTTB9Ahd)aDAY;bkar
zfPaVDSZ^w~gsqiq$+9+8)_uTy%6^F0@QTqP_L1b%zY|K(-!scQ8B)2x$Fob@Zl1}{
zG5ZcF7&02@pL&H*OpTx?CyP`K*0xcQDURb;Tk(p48S+jehRMimjxZUWj|fd(pFJQq
zQUh+}P`0ES#DdI%<A4APcYO8`GQ@d0D(QE%i<7fC_ddIOyP)En6uuhPEWDNUCYXr`
z`cBH>g|&07>UE`Y@(F14yS+tJ`g=?~de3dbDdOm7%Ec9<F5*0K+wm6C%elv-R)Rf0
z>3^I+_R+_;AI;0>E0}<~N%5E|RYtMPl0}?s?(%I%1%nIa^IAkUV(6)ep~Jam>cJvn
zsJY1fx*}IDhEz#g%0^&d0$Sr&D*V>gvuEHM4G}|1Tcm&z1SkUmWe9L(P2k3h5OL&z
z`!OPFTPW9lwHxM=1Vh8V*4g?yJNaqlQJ3!s$nW@$t2X-)LrzFNwJlTvZ%5K|6fq}c
zcmf5AolMi6t!K}+)TgV+_qBOLo2H)u$EesHlT}jDRqkwUNsYy)&^z}K5oX4?K1M{G
zpBfeN8TgfkTF?ItoDbFB;`sO!z))>a<rm{JVGiURkEE_0C_jP+u%RpU8@YYS?o9+D
zkO;Xak*{1o;(DtuRVPHG>SU6fpMrZV#wyutrJ5qnPo<DEw6rd)80v%}l@j_tVIOHD
z%R3k*CM1SDM`~vqK*v*ktoRRsg3yNo@tupyo3lYzJcvcgXu^N(AMF<KA4jhadmH@6
zI-Z+xY|1!Qpsv9=&?}P^I3u(9@=)m0De|O*R(@_HYr0!oHx#&I<la>f38}{c7f?ie
z8-zZB903-Q{+3Z9UEu@AA+aI(_2<u^dyQ1OZem^rU%n`nQ4w<-Zj_4G9T<iM<w{a2
z5dmMmbb#aBOPymQiSkdw{QopYeux<Fig11?Si}6^Jvcll%>P$M2Zx*azmDhg=birm
z6CCuFx**qTsdc{&WVg6u)Cd2u^X1FdmP&T^5JKW9ErJ*zh*CThT3Ds~{Mj+qLeNP#
zt1A<CfRlb#w%)Er8LJ7}{h$$tGUeq2F@`+^{*b#n;)0`n^(PLrT@ZAflo%qO`de4f
z>>r1efid!fRL2K3wbPk2NwdR}o1&6viEW*I(6I>^YaXLdIk(e7t{6a5mC<ONpFe|m
zE|xpATbVn7)2cFcKOZN^UXxAsP?wK))bQn!nkG5vn>gnm%Bvzpa_7$-(D~F+w8{e^
zb>u{?m&1`L;k82%rn+}J#CVvnM^QlsU%r%;c9n@iGD5ZaK%&>nW`Ybq+5dFDe0l7-
zx{9Yk{=3X`vQD<SFu}F*fA`>Mf4_kL-P=9r?QP`$I-bG|OUBt4(9|q+9A_&VCjdi?
z9t0xFa?`#0QOlg&tvgJ-J~&a%oogd{Pm!`DVM?|FB%lWc>=&$8+Si;S4M&J5d3GCN
z-$N`X&?dd^kH&2bL+rpXWORbOy!<nkI^N&e8DTMwZo4iGivDTY0!E;pb(1R#!Oqdq
zVJ8MHVoGjsfVhA`*asx?{lw#Dyk{nNrt7#4doUfd#Y3b(kR$E3tV*WIn%>YonRovh
zGZh!VSU$eRTqg+qh(W(pJN1o^Dbt{h*ho1sA21n3K4isgTL5sEhNuq`UEJFOz>J2X
z;$*y-R}2$@*omZ(8bWjNBj?1!u9Pg2>69TO_Q7Hf7=qq3YXuTiF5!YQ1fZ!}*BGAu
z!6~_dV%!H^y}jtF+&A<+k8Or}n68Vjg#tU?QtBf}taTg$2nf1Q>qZdrcpl`st=&^*
zUE^7$C^3zx_GxeN)rS*p=e{3fcWhi+iTfFH@Pe|~4gE4M!`9Xixm``OEA?{B1tLQ8
z!if)YaG?$KY5NB%@zsZuT=ThL8Utr<eNr{(>p?-vK3&sj^|wkD)0IyFz(9$tEugpm
zK(3Iggob%2k8&n^I!Ed|U}B?Q(E){2Ej!~nuA**hfQfRAbNst%v#vm5AJ_ako_b8`
zYjU_VtdJS-Iv!TsKES^hnYj4AspdC@p|L<oV(TvQ!0ptMsH*oTWm4r%&wg!L<%{a-
z<{3xOWEvGyCLL~)N`XYo+{JS5Lc8Efn;{4l2#7HhQl8;qViO&zl#&ghD<bIo(}buQ
zXs%5jGRZ9!<3be_w#8n5K>;E>VyRa{<%bLb<ziBW3V@(H22_j@>w>?Sy1aWoxRK&V
z*A;mnWSBA?d;muUv4gp3e>JDw(ujE0T2_zcOj9RWHnlBZ4wY)7gNY+>fb!x`z&k`@
zHjIdem_N-560=wW4Kb{4R(8?OHR7cFLAStz1_|Y4$;G-#x1<H+s2-0hh#3`OS1+&b
z7zMDOdi}`p)%l10LGCrkcVB_0Fb7cC>YpdmR_&`0mTY2l70EsMPR@A3lJ2Hbz^7}6
z5n|hbvV`#kl}Q+KDkZWC6bKO$IPY)EsEIi*T&``;W%JFBQf~sacr|(j@=T9uVW1QP
zBZk#b6kUQt07=a6Dl$dxGWl2mMqElJh{?6ar6YoWPiQNVAPZId98sXD^cVtt?NQWl
zwE#{5LrSVdBty>xOM-V&O~GVHQxDY$i&#B&X%IvNi>U_O<J(A3#&<k4LH-WMBL^~f
zj0JK<#L$k^ZB^BYQjxoX_bjnxJkQm&G!6Bm6v&zpkUFGhDxFogqP!$upABwO44fQ{
zV(%B$a-I%>>@ZA*i0MI8>W^CHjYHjdt#B$+5?+mN11u6w=Spm!s6B(y4MR_<N8p@*
z6Br=>1ah?U0gye-9oez%h9K7atA;>+&#}LUxY8orF=Wsch{?I<ay?;_>6<Ltg+9BT
z8VO<T2#c@OrNl*{;5$aP?r1@f?1%U>+a4l)u8r2y&G&{~E~pMsOjP#H=eoskT8z@<
za`jN^e+jIaMCdUZbW215xKT`pk*^pX2SFqhj1CS(A~7lHrtK)vsBVh-TBUy55*J!o
znK#q$f^uyo3c!_(Ql*A%6xMVnQb9G--A0h69p2SFD|a+ffN&lKTJ^m}#yed>RQaqE
zS5NG=E-ZAh9M6oNu0aLSTcixv#oc5Q`x9?mqy)EY<7|urs+q^0yg~rPPvthH1*25v
ztzZ;b(VpC5-hNjGNqJ9aYh0=yln1VAh|Jcqg03DnHEfjlQ!{q3pbAKa`y~}^nZhf`
zE;yL_qwcBFM@rD;&;~w=_lJG(Yo~JNcYbTgS;-2eoE00i2Fd%}vPD#!hRYj$OHxZ`
zHtjEMWK@Y#bGWsM5g!c&AlR3a7#mZP-oxnyRC|{4yWEruBW|DY$6$mfh{RrPRs0xE
z5C|e);LuMg>k8)!u&)l3q`5-GGCuLHHn9}sULvscytYjXm@jv`KtkI&(&bTZQMF*!
zU?^K9BLVK?-h-S|7po;ThXT;DGuyxIMn6N(fRCWaQjROCMn(3C!h(shROU%r7E@wE
z?S!Bi#7qfFYtIo?qk4-F0Rd!pB^^pvJ8tK;-ZZ9Tq-s2b*jJQCh#+O?kwQ``id~@M
z%`7yHj%^@ZDm2X;Eg%wsRZycqohVAgLIE|Yl_!gGT9R0LyIiB5>I50RUTf<SV{)yK
z$|VaDg9)_k5A}0GiPR6|ZXn{u(lSl<nYT#X%fV=CK(X#Uxa?ORxh~>-82RAE?Nsh&
zum_FW1I27+nnEdhuaYy%yacysC>bl_x`>j&#bm8iAnVO9O_I7kcME}SZD`u1SqmHH
zb`{NPT00+FXcnTbut-EVPi42gj4@PG#zIt0;&jygsqRv3x~Nrfrbu+b#pTVJO>Ey#
z04EfCAf%jQxn1DMjhF^t@(A&5;MTFUwWhN%xt*;ogqO|eU}k2YL1g9qX$=gXO&W8v
zXs{>R#BRoVR$*W)8WzDh0p66r0K0$}ZOY}g02gw!osr_nsy4*FuR{q<nMq|z@vzw^
zf$4VQB0kB+brSoGh!`=OUbWP9@@rJbLUVL|bpl-I`(5ypS}3iSy_!}mT2Gly)%7jr
zBCaW~t!lhm(13(E!kYsul&Vk`Dcabi#fpV+B4?73Q#NQ?c0xwvj+kS7@=qMk=|O?)
z99P5qh%w3<xL&1++1-a+N&*u_uRnPz&?3W0rY+l+2IC=sWSZNKB_VWU<cD&l6cj|E
zR8D;~L4JlY`3u}dT^rdfdOS`4Qj+qJi#;S~r!q;4F`8zqumY0^fs*l7@e;&}6SY2+
z8IAm@Lbs43b%=+O2GdZDp6VFu)<XsFC}V|n?r9dkLnxHY%9Jcnf<<a`6-24)MvTY9
zke}3vIq7{!lZDC5DLr~s+tNf~_Ys`K3>6^GlfwdvPhM>>Npp5z4+)6<!~;vzc}|GM
zJXf)euHr<=cFDXnt884u>Rp|Dd^#E-6Bv#Ys}nI}1~CB~5sn3(pse<3S%N^bMMhYc
zpi+m4`sGIt>pkSzZnGN|nq^00t!qpVDe|E~!lVf^Dp(63hOG-N&<xw+S-n)&OocX!
zXJ!df)%_&sr-&ols?v7ttY0Z>6pT6zprV?(QdY^;V(DyLC~Yf(*wzZ&J+9DMxIW^p
zbHgIkv8=OJq98!fKtW^!F+sfOvZz~C%V?ZzS0t#1GGo_HmIBu&WQzOQ20(|M@AZO|
zuzfsGS%63FOt9&bi>Q%`#jH9H0v*}1Pq$NnczYc(GY>3e=hGpRd0?T~Sjom&U{`>u
z6i9Xcqvi_jGp`&-8_TOvF#MA7sVIQP#iasi@BpfTQFbRiGm7|~LRGPvB^i}AnW>rl
zT8<`GsCb6j1XI&?TQ#6=UWQNz#7H0f|1UoN`48vif4z9|YtQ-5-~RmKV^{t0A20vw
z<sb2nKfiqW;>EAOynAzVb@m&6`Nyv$3hwl;KVJNb&VFl2<mJo%`ctVY4^9TUDR+F7
zIeOkF@!y%zu`QEjdzquUXsa@p*1I$G%|0>vCb}&h17yr<I*@t;jkKc#ze`BucMpZ!
zKp@uyfm|x|ae0u(WkMalC5Yo!3vIkb0&0BYGi_zcsu?Iw5QF-XU_lifl0wSV@nRuE
zZYtfMf#a+5EcQzecT9*O7vYIq_U<7g%CBb5L{PXhNjjv2o8>Sio>{t0g{g@&<T>wV
zOf^wKrOK~RY8(VmO@X*=*?Q)S!<770)9HgwMaaiaOs0(WOl$rBsKdppDHJm6?eF6O
zPQM|T>2iRj8z^Ztlyphp(G6U*4P0~$0MVxf3H{appo>C17X)=K2;W>7sQL9mGM50p
zTpVV(FradU(8))^D=vyoTm}|#apd8`IKxFzg-gT`t^hH(C_Zp;G~oAy{aZ5HZ&mod
zZy3?HIDT&lXuYLi^A<+peXZ>FlrVM6LeMP<FSj^4ZgDK!Qjl*;!nu9psJ5kG*cL~u
zEsjrH0vc@@*t4gNG+P8ywn2|QW%Sq*uwqL=hCR+I(OiWE7Kud>UEer<YZ+**rSal|
zNUX&<abc9zk}y?^BB&O{OKs3m%R)z`mun>OsLZQ+d{k<MfUb)|fxL_2`F9=d&5Vz<
zQ$JlwG^Q%PI9A`;^&vizPQKinSJ-@Bp{osuD?ha`MZZ)XU8qttoL^{atNF@uilLj7
zlKevTM;pdD%=v~V$>j;N9d4MxRcNW0!%&=NUp1jgPLV(?Q0~2WM^a@iiMJeL%xE;q
z!)k3-(A4a#ZUT(&*T8}s%Zv?ypb}c(DEZ3-^X;{Lvb6i@9<*ipD{<tc*CXoH0a`2{
zS<|Yrfk>^F>n_gVBuXxv<G38RA=q86L|pqRjMZLQlm*uYK}^bK{@4#^A&j!5Awz&r
zlAgftJptrJVU61y@MY1H3s-tpk3~MA+=aK4GB#6VUgpdtYYJqmB@Y;A{W2K=#jKrc
zB=_?jeS@gJ$h1>b(2_*)-o|RSj-{zK8gLMfryRS`uL}I7q}uGM>UM`h(M>AVs_;S)
zl~rjjydbdS#|~~lBnpZSq|BwT=}X;_tr#-7khF>slWRpvfN;|qlS1{_7!uD{Vxx5A
zoQ3PEKpdOX@t!K&seJFSezFQzl`*o?bdZPGq)WFN$~!c5^f(4E)Z5|$<HgHyp|}ho
zb(KN9q^C!JgPSqpC@ZFD2>%(Wi_S7=iutx;R((r-$ZD5Mh+%0Pwen<i-tSe{-5{@5
zgS^%Zv<UoKQCJoRd!D_>GIt<L-*-IC-Npvz9rx*~cNFW8;j`=-mbFh<$<AOIdx394
z`+w5<{w9RsE79q{dM&=auVv$1d3^7Rmf>q~uVl<fl@1o2rpd)(s$A`3N&jkatt53?
z(7E!}9gk3mk#}hj%2hSz>`tpqfO5vyRBN_Kc-e&`BTAb0*|w#%Li0$3Q&t11MS-@r
z0?)D=SE2Vy*pgR<+@B22<8>qEA_E^$&{&Himdfo}gSu5)7BrvK92cPU=sXNOsrD`M
zDH-ua4mYTFSj}JOHsJN5**wOw8@6iKq-!)(SE$ysXokk<aJWTVv{*}29cr3$QAqQ3
z`D9HG6|i6Whzii5#PKk{>)6~jNvK2p{Comdh@#_Q<MZ6OZJyv3uOUi37o?s}CXFYp
zwFwnEt2xZXZUCr8u-BQlO6_PiakW^R(x=vx(?*f9&|Hdf%vRSWnagJFh86}i3&|y!
z)GU<S8`*xMEQSxOBa`GN6l<App_|wn%Aj2s2^v6Q$k-6ZCxi1Ek^(Wnv4>ok#U1Ch
z;*Kd$Pg1Y?#wM3C?a%QnQR~_UCmU|XBlB%_(1eY>6v#J@J<fJO&Q~!DSH+8D^)U`*
zdnc%}d4ejtC#Z+4+w7m9y$!T><6&v@?1IEZQJJ%~EF_a79$=<=i6<`QKkx>LD?b`x
zB9+P)FEuiJXgw-gO-Ii}qgRhlO~1~4Ku8?Xl`|8(pe)^)zO+=hVj2U=O2__5S@MsF
zi}Zvvn6VO8@@YZsTm2~|ar=K(CiNC^OZg0iLoHN%K%C+e_Bz>%XY)@*tU~jWXXhpP
z#OIi#{cP{m<oL+i!3HU+Z55}BwC?b1a$9%n@20aW1VUPD<B2a>9@jCwRW~StrCx-$
z_}yuF&TM&MT18?lGxQqsj(SZZW>82T3-LhyoeyKVAJYtEz|v1~EVa`9<%pOw)&Bjj
z|NRs8k)8$r{@4GJQs>|Q`rm)?seAYDfBm1<2Xg1pAVxUq%01`0#+lfb{0Q49CSzV;
z21o$(!!a~xSj-~U=R5JG=|q>R(_}4;syts7TqI{>Y6+Yy1DK4qtBSUiU?Njv9bH8M
z$Nq1noOyUSMCwEhj?{5^S|!&j3$&5skvrbb2DjeI6<QH-kvb?rIOV9|`N!oNS*B#o
zSxDDtSdd><bC^w0n8QF;Jg;XEBDdRg+-LUDj2!4S-1K6Cd9o6EZjdh~65O^c!yabH
z)n1M4L5H_UpCVz6<C{&@-PV;*2W7RhKUQmfin~2?AWf#aV;F|0y>?=uJg>e|Wo(O|
z9RD3(oflzlW+<(@#m1FewNzO_o6CNFKGcP=^ejt^^iU+WJAern2zoVY5&?(^%uq7A
zT6Sp*R^~VYsPI;biNOCixV+eTLn}z?@q+3Y02OkF0z|~Nk{|j+BXx4%Kz`{4kl-QW
zqHD@PjQ_g#Ta`K>nHN34AoS68?1)QLuy_t(uDc_ls05y6LuGmZgfu=h{9ZLzE{{@A
zgvNsB<2%#`9c2JdtNB@S{}<bZAM$yjPYLYEL>*nZ#5|f^NYYAb;{n5?5whR?0L(T?
zo$vHgigYYj<O~U74(myl=u)MB-TSSw#`*q|>o|G<dwPqGx$LEvW=8TU5%58l<VtO$
zs%O<fZ)!GAq#_`d6Xg3&y!XF{Q`rmgz?tJ*ArrOSnjG<Wd3xE`HIocABJmklLo8*V
zKJcqvwE)^I8v97xF(jkpyuo24B8KKWqM>XljvtG~xF|Rt&F0#&airZjh0n8|w%W$k
zo&8BCh)poM-?^vk4wI21S<^8`CGDv7XXlyvXYRJB1*~m@a;x1cTP4fkJ99NEb}h7D
z$DR*jm{K8cK{HBZY{g{490brq>CrhWW@Xu->R32;>KM$91Boa9)<>1P)46&u!mXz7
z`}5QFFnEOLnyZyt-l{|VDo|p;h7<!;$No8GwcO&`d88|WtChd+{C?1r!Fkq@Z>w&}
zw7<C{bf&Y@62nM^`8$7#THZ#2%qdKX`#v>;fcFGHSl2c}IdZ8wWKmK?#HF4-R1^|`
zi8wmwf=i<EZ^wwSKq^ju_w3i0{`r6L|8?<q({=gzr|V2|rE)CQ@!kJ?)pL5gPH)#j
zvDfRX{|E1HPO49bQ+2HnZ&}z``aIf&r`a>m%r;dWsrI#<hgPw|Z*JcFrp``-Py61@
z!lGnZf;M+=eusB&wmqJ$765H)k%2_dc_N$Dpf@u|myStmWRyqX=h-W{RBm4Aythh^
z=|U&K+05mOp9yEx6x*H>SFb&pvkUv6H<M!3<j=43<>P86enw{4da@B+GG8}V&+)Nb
z+_hg+j+6GFnK2jGe&Z{V3fqVw&S!9XZ7vMmM8wP-5wpZdn6EtoW)u0c*2tGl#LH8T
zc-frHvZ9k&49hHZHjAdQw9{E;j7s{7Vv#l{qUdLHY{b_cQ}i`Q5j~R1xj8<kWn|C7
zaXd?i+F44B&I}PbwR+q)9DuWMxXt3hHBUU0W_f`#-)@-9LIE+0guZ;8K`sl1vpnUS
zYv+w)Sa#IH!Z8ZpN<_jM;tv*&HdtnC!J?4_%ZeM=L<tn51Qv=1SPJrgF^vDBX#Rz9
z`%6LSFM`Ei1a-d%zJ7zGpSf`xB>e_SzroCJF!LMC{L{PtyV*qc-QEG7cPcJ|T3;BW
zz9=I7E5)CGb7=F;?c3ibf_$ZSZ_kJh-`v0bl<wbN3Wj@8#P(9~*_(T`zuJ4Wzfy$s
z!g%OK(a%o<>-<Eo|Ni{h0f>0O`SNA!hs{&}z~3W=Jk0MLmt#juq#c2RP=UC1<jYKw
z<XVpI6b63VGJ3sU@95w_{oCvH3jgl!9UdM1uzT=o|LEvoZ*On+hu+@)?&0ANptstl
z>nGv@vLAX2msM=sSMunoc8WruP6I?l;cAzV?@V@cceQA!>*vp)`$1#&GEAY2>tDWX
zWv!7a={52Z<fxn49lw0p`urJS;`)(?Kquj`t`BdK&pV(C{!mtTBEX(b?dUbwQm)Qp
zXv&O&{tX6xO5q@;Amu^>vCL&Ox-GfeX<8N#W7-%Bee6PB)noB@T@pt=az(sv4WMwx
zZ&lM`0Sd#gx$ooIYp5h+*Sf!tG@TiW)Q@aG9wsU8DZBG2^v)$wET&xzT0B3^k(U)o
zl6J94yAyHL2OS~x<{bSN0~k{8ZI&U-SY;ac;|%N&Qt!CP5vt+^u4pa=6tIqk?!o~a
zp{vOE2gqeeWQr<&$(2`?J70}b2kIAN%Ebi|viqwBIg=#KCp7@<qGMO>oiB<aA^$l;
zEu}!HhXy%zR||j6=uCMZ_?ScwwF8u;)Oy5$LcFtxT#^$_>dJ=%y_O88a1ip#JIDoM
z<{dHk5)ROCsC>3V0Eg;2t7+_+<47w=W@L@^gM$|$^g+kozX^>mUpk=s5_Gcdxj`)8
zo%{e+%B_@8%%bK^%5YUZV`UHZ)8}fRK$%r~75lF;k?zXMnrVJGF1<~)(^F-i8n|QR
zMLs5@^AVxR>$3;sMxx{(D)nS>FW_hyd-foAyga>rEc+B@X<h3xVl6G<4o&;2CJv)M
z%3n>k6Z?NcncZSnq9I~X&Jb{>&~w(>A>vs|Zm4%*Kw8&0fZTpM&5TtoiK38U%CMNG
zAS$z$a$J3VnBy`mGS^XY<VGq3B?3K&bmTa4T^fW}j1F;r|EG5{*AWpoK&LvkrB=2G
z>LXT^{F#?CNPaUS<pnrQg?7~{oPrawn>4M7New+kT(T`Q?qkTW7#iXS(AnwaSBb96
z@l~2b>L8S3LD>}K_(3J^=j4{oe+xOfMj-`XzLdVz(e5{;7H}lR;8r4e+SO-yWoCy9
zsLL=$yy$Q2IL;735i#V9<R0nu4GpPJM^m*>Z2wFNWmg}rk?TVoXs6`sydIO#QM)V8
zlfviqpI#iFo?f2~1}`lMC$IM`ZzUJgNW9+fam!a9K@TxU$v;d<bBgp@=GRp^yM>5U
z3=ng~m?7x#*Y-s&!=Qgv>2Gv$J4y5)7<4oc(TVlfsy^g`VOKaJI|!C!Qi?e+#LhoM
z{`#<2m*O^JT)f`x*%B$|j-w)*CeU{R`0#qa7i1G6GAVM52_DqLTab&&fY=9eqb>i}
z<<z~)B$=2K$0H(2j2OtbI)G7TEfCg)N^(dz9%i{UHN7hIvs2V0bGs9hurO)BAAlGs
zwY!&}F_ltTJ}wO5E%vcBvWC&HygnbleQT9?PzdObTZ_A6lYHs2&Q91Wbdsd=OSy$h
zYbW2V(x$DfiiOhdUe6|$)+3c#38k2ank7<Bc<k8(LqT{P<kPH2Ce%xWrOShu!yaE4
zWRFd(l?MsDCYdIKH0!ct!wiM=TW6bDW~{yz?PN(?v9TVxP_IW-h^*Q4k*A~~)XaJL
zREvxGBtnK&9$zRh#PRQ~6@+V@dg=Osm9BNcj#JLB9V}SZa_6&krmbU=KX=B;mFwt<
z;b0PR<S4w)YvrAMUdoW)&RrvyP7u@aFJ})SR5#oI1hF46Z6GXCNR^(w1FHb}j%9*j
zwa1kQKAs?gICnxuZ&4eO5a+m(8I~&*YDkwSYd-OuvSC>zwviBdqec~j>Xd3UQY!|J
z2L}DK$q}JU@&)6iq&OBLbmD_DUi;LAzRcFQZvgU59V6(A@fBqvvEG%s*p#ADIw57E
zVr$Vzx!9GO@Z|O06P(4l#;kWD*D?em@YY8+3=W6beFq5~Ay(oHC!Q98%enz}8Rc{+
zx-JcN;2qy_-BA9|fsvqcyBKlN*Cy`n-rnx+?vLHQ;tacreBT`Z0nUdPR9tDeTqd0!
zosiLoY&?PiP8Wx=Sbnqlv4-(Pt~U(JWfvNSG|TTA6YH`}UgZX~63$gEWK>X>`h9S7
za<zK4C`_SvN+fpmHc~z{!Y@_ASCB2s+BD&ul6}#VTH3oORbq~g-l7TeE6ljD9RAab
zlfn6?vy0QK%kzsHn|(V#f?<~@>qf7u{;xuAo75KWHsn0arD$;Agd^b)>Y*wdkV$zw
zf!NoKI2|ByA#>PCPXb3wLsUU-65LF~3PZWZR!J_+W;RE97$}9!N8r;)1&0ms$l=OQ
z<P?cyYM_#zsMOl2bTKpKRNrn%zQ#MCkG69nj+g^ShzLvDb(;4av16ISPAH||@Mt*1
z4;DgEOk$u?*a<=3r}qvDLNU$tK$VeDCO?y@PtvAWu?FXk3*9ktgzy~`@>0nuoS(?F
zH#cw3$-soiRLmpA%tit`ffm6Pbghe`m283DLaR!?rc@wbl6Ntw>Q<TLMyD`U_9_@?
zjNChQl%C^9#Br(bD<_1-{30b9Q*qCK(y;9QYikcZ2nLVYh?h06&!6M0e}I2RRFt$o
ztI#YhsjU~)ydWzqb$UHBNebWcYpq%7?C^_bwYgPQ>oi(hy>*J;8|z)_&0InGULEQ^
z_|2FhKBm6c2Zy=uQu}{{L{Vo5wH_STXrWDphD`NAvb89dHD?!AZ8u_y*~(is513$q
zp?`{eI5o1Q5BBr0d9%+-KJVr~hlpY7*)vyLC;sRC_1UMB>$B6di<|S~x1WAGe|u)L
zRs6)L<peM-dEdeC7c{jV?P7tODoy5uAq5nK{!iFPCo!3F@5x8uStJu!zR^%0r;<4c
zwb;h2?qWB?L<B$dcXp~byX6ULRxA~4eI@q^pwlVOOkIJWZ*HyzpRTSi|NC$D^2;k>
zhHe`P)=<MX6`Z|(OQ{~AO_jU2oULjx#da0TPlPv@p9ZJDe0qEN=F{7=4`*-NmZ^C9
z4IP~R@;23|Z5@ymT2dVWonx7GAfS7v^pnbN&=owp_;7xGdGYS-;zmu?tK*xWD@=<>
zxS2Bmc2pI)EJqdG{RgLHhLLNn0$3}5d2{ym)8Op-!}-bCr;FovRuNMrcC+QkzXuwe
zdQku`m&!Z)@2kt}o3rarmp5;(8YDowlFuI0(VFZmKFPHWkCki=HG8`-NtUOv5)?@>
zbAe&3gj7`>w|Kp-VG>9@@S>T;UxF7IL7)J_avvuc1)U-CD1)7sRU^xJ@#ctP6FB#G
zTvWdJgdyl%5`Su0De752(;#bI*ILyKaVNYhj&`wt@DA^|&=D-+Vn^xCt|;9~HEYMr
zVS!9I{4v}Jdh%G1m)2RKHkPNDnJYc=Ijrn2waD^eVqx>7(rDIGbtW8T(@Um<UbnKn
zzq(mvXVb>UlzG;|By-H1rB$bThBOjum@b)yK6cbs`pgvnXVjHhV*h?<jQ{KP4iEMU
z@qc@JhkKj&zjZv>aKF+G3R^ll@MLgqE@!C?1k9T<i-B`;2Dlt+LiM)n*hCF7!Q8W;
zo8tU&u$2b-#Yash>r_a+b26ltL@7pT>~cY6HRu4Nqy98_!)O$0Elag>$TM&HKyFC4
zve6EYJ;L?RO!Hp_h1_G}(R=PlaTqe{BF-BmLjC;TJv`bk#{V9^I_hoa|2m$ml8^*$
z>Jg52WiNB;L;Nw~=x4bgY7RI_B2?7uQksGZEruwdWPs*~ERKuv_{BN{i{oM!k1CES
zEj6TAU+OUs3<@+dv2s#l#$@zfeTwyy06x4YP<yuge9y{>+|7TFl_?V=l_fY&WU_7S
zRvVaHF0pbvmJlJFA+@6L;Mrnq<%rf+bg7|iZKHQh;nlU8J9sx6Ls~uWG9j@uP%cKJ
zmZPn+)sNGqRCjxA!Wz|LT8L?!KSXd@(U9>+)56P86vJZ2snjoR`B_Ac`FoC-ZfWP@
z1{}Y?`T6qt{N`^TKMwvjxH)?lJMD6@=NUS(Gf!#)9_9D15!{g~PT~4+9_2z;VPC93
zHg!UJj~E{#-|wOa3s~MQy}Cg6&bdGVQ2$k6ip0PH9J%`jC;g8fCy;&o=;PauAEnIk
zk@)yARM)2Pj~^>{Bp*Kl=O@bCTt!x9HmZx+Ra0MA&S7YTxnQsrQe9@$JE-e8+j6<P
zv4Aqm*|N+DXIe$+MSid1Rk_o#j!ThsD=<=dV0;tc$*^rwiUPZbP>f&y>BZ^w`G>RX
zPuFK}J`FBUe))8DeDkx7hUR!HiL1Bo-<)445~t_aEh365J-n^GpB7EbG*V8zcy?A#
z&I**Uxf|BfCHC4ZARTIJknhoX%Kl^qYWne`wS-^Z|K;q{#pP+Whs*9nSEm(Lc+b<D
zDwJxeW=rNqThL1W+oo96N>Fdyj~OGi>|1C*Zm7UljURoYDn^yaO(^LZ(o)doz^G~?
zyEGW8q=voMe|nLhi?*b5qB%`alD0@XJ`S)A5vfz@0Nb}Rjhz@n`Xok2Zlg6uj{8(N
zBnnD>6sJ9f0-j=iH}I*rh=Tbsr;6$-(5BUdzd4+#YU&IKQ*%<R^E)NwE;Aqhhmwju
zGU&{#{njxC+^S&Kk%3QR&lxfrI5@}yT2;X#4VXSZmFv^_yVJp3;Lvz&Xhw#9BWSdE
zAS`K?iAr0xLbSoMed}1ZRVboa+y7*DK27x-M%$hAKi+*@62z`vkXoxdJHF0V$Qr<P
zRmDCUvTlXJZR<I{dT#&k3@DI#|L@-Ze($h&{`3B;qmBP}9Zx&|Z)UOD_<uM4-;Muw
z<Nw|Ge^=oDU9J~*H3!ZX4pT{M(lW~6r2nxh&cJvyJlx6|wmG9^&NEtO_Er@RYO$Vi
zRB<SZHqcf_KCZ(xb<$V1468w-c@vPY{IVP$k9ep`u^%_y=*RO$SNb??=M=8d#k|@{
z_mmvF--O$>`KYLv8*0yr>R3Cu$Xlhgx{{t{sgJYgxUz{zHt_;7cjIjS?hY&3_=h+C
z;f;T|oqsrX_BxmhsrL738;s3O8#{f;kjnKjF{gYjPUIO6?P=P^Shurn&cI3Eul(Sf
z!pGdXGTATI!(@)?50lyd?hcb#qx-&EjovupH_rHtGk)WY-#FvJSGfx|2ZE?2r<Q=-
zc46**dzd;y?u0l*PH8%4$b9_R{U{TC%w)qpGVX{%&T<iI|1eJ>Dq|ygv-6p!0F$+l
z>lqMZ#F1L8Ie-i$SEnnFhzEw00hb0L6j-19s&3SuK4%C-yl~9TGkpQ5xwv0B+r}`y
zj9tFEMFN6}ma6f6{3nC+(jn0GgD0shFoNam^}{IB@69uo<%~@OI(t#cs1~!%YW8`W
zrw296-MYhOT2JKGlX%9`iZgnK**s%O<*B{2X}zQ=J<D`nWKi?8W}DaZ4R4;xtP_0R
zfwq@gV=k^Ms8vu}8km*e;^vRnDpkp@OUz%JnF_b+9SiqFjT5D=cBPZY8q}M*dX{vZ
zs<PG#ll*3%nem@9pZ?X1|2*7(RltAlzS=$9;6K;#6!xq7oISHcT?U5J9Nf2F1g9=^
zar~yH^Btl$%cHhh>}I(<{S>V!l->ChdgsbsE2dr7$B2mY(;RJCizI0mo3uL-M}5%A
z2f8&6{t}>~3857MMGKvjSW*neFD<J0#fEGw<<3{5)NSdCo}A@U8rSTh`bid#@YvLo
zM=j2Wd)0Z{;!;(;szz!xm{cQ6R)t7StNs-6s1?1jR7~>IM7y>*Q+tDT{c7$bR7>xY
zZX#^-DOX(zQga7kJDP27AFQ{s>G`{Xvu@z5GtR*D&frqAnE|T}9K75+b?3pXmNcQ%
z<g#N-E<2Sbm$hB&I}a#xXD&!)QEF@enHxZ6IsIw?nFcu)A~tkrC~$y(SIqmmG)Z;J
zE5wGEnRH9N)Nupz+`v4aG|W@agr^De)OD+Zc$N`eEp+y$f(EsU)knAyvDG$b=DQH*
z-tcU0LEPMexB;tfz^WUtYN?Vdx~H*jjkVT$cGPOQh&5nV?S($g<D)``C)h`$%#}sy
zv)F!jJy$~3nLn(i1x7<SQoF4__zU(F=0hz^)+(qxYP?o=Gi9EThbGp{9+EuUPzyfg
zJGT+v;c|i0If}s}B=*NR=6eg0t`B)dn<OFi**4QRmu;@Rs!#s1&7wW72`Os<v$n*X
z&2Ik8YwZnyvl^*1e--DdL4{CSxT6w~;(XPrwCvVbY@z!{YeZ{9sYN+kg@&w=zYQfc
z3gf0CtAuomaxD_OO=)>azFH~1x!koxto`M#UllU71^zR>Y}3iy%{&tbwBi28-r-U4
z{@49pZ-0aTT*p(`_azsr#@jt71%aZ_r_%tDIZ&Vp+4zr>l$FRjk)d@JSsX7~M}4U%
zQiehwyO6i;<T!&adS*OmyYW+@ImwN^AQczjo|5MR+#(P_c85Fwxzc2l=$pwdIJrL6
z;XF}_YE?8b0nZM52RYhKmNxc%fF7^_a3~N1kkN>E;8pifZm%ivxGV(=Ma+e=B125P
zT)CVAF~(dQ3;-X~$oFJ*M@pk%K#U=g|B*xjOs-|!Qxo!`?9x_<-a*7hs1JJSn;gbh
zo44#3-qiwd+YInb?7jrtYy<fxaqMcjYV(3ofeJ}u5xFFW*p&|nQa5t|%Ji3akPF1j
zJK|4)fOm)kG#nyVD19&ne_{>@6@Vk{l`&%8xU@KUAwoZg2*|AM8H{QNbYFr_wjno&
z1-z3-UFJs3PADFp1i>2Tt{Ne$`k45K@KAP%rN~nMRVLD1Sy{6p;x^R@nYl;&G-8;H
z2JRSnk({aLBSMqcXAj7Ylp!mpPnLSJY^GDv`0OEMi1Xsrn`x(Hmh8ILTRcII_5>*p
zFrz-|<{8pZb3&QjVr{1(Vo)+PID5dnWDUt)d_H5n3j@-+#(~PWcvVYVm1?N8>qoN8
zwV|amUG)_}rsr5zDv?&z7yajzn`OYSW-qHhYwnqWTI;UULg$nE2zrP)O1@!AsxFl(
zBrCvwY+8S(wMDaD2R1otFotzbomRcM#*0F>9LL$J+P{5JrrM-}QiNIdbe2@P&0X4^
zf->3YyC0RzZN1;KRU_Rn<g_)Q6rdZahGP!y$4~$d4KYDn>*n$B$;|@<V@mJ3;ICMW
zX(V(49}}cv{SB#q&|68#rG#S-G30>|G7(4eGs9;pac7MDpv%WQl5D3BLdu1M2^Y}!
zx3p2j>LoWV@sN*XE9#iW))V=Bl2Qm643IE#6%&^sx#Na@d!i|cZYIC(@G^p+EvdNo
z-!K}53D6+-cCISs=_Zv-1d)KFid}94VVSXhTVW#rJr8S_W4e1OzN=Vb_bmIF*bMk|
zO@a;fKXwaUCm#epyA`m({&%o<)GOHk4tj^X8~finp2GSe$Ght)t4C&;IMMp<HT6+$
zc~GfgB*v5(lyut#Lgh5#(?JgcF#>%jWORZhX~dMKKclseMZR7?9RNeDBnt0?Upt-O
zwhEfVuboh~feS>0acY`G6U1&+f)Ns(ZP4*CSO4D2ZJGQ-caHokj9)1+jue48N_KsS
zgVx3C_;FiV`6b#`vPq#FNi7@PvQ21$h?t`bO>2_QoU2(b$8vAD)CMg?utICHm1CIC
zWT-81nFUE1-ZWyC@?1)phe>v(+saakRTb@o3*v4xvnR(5#Yy&?R(8wc=r5Rfn2c5-
zmCV^hi9otFMa?FYcy#*@<O(B}bo~c88=~r^vId>EGrA@FVjE|Pl%WPzSr+8;OJ$I7
zMNMZ{jo3;T5FJqSgjbJh@x62@q%hcRg(oIMI={SYDSh<l1hXs^OIaXFrSEV7Mf6CO
zVE8r?h}W#bPfPMXir`Hq@^>qB^P=qOiriSG5UZEEb}e%;_0p;*8{7A~l(EJ1@ue$)
zY5z3~#8iY-i^fIkS0Sxi4DR<PHM4W^yA_-zfi#2cT(9V4h~wX%zOp*2_*}riu}}%~
z%ZYU@HjgNe+Vv~-*0Bj_)_^SqTBqlV<>>+w^cxVQxz<0H5S7DFIYde4#3xCps?H)C
zYgE18Dq6Dyo|~;v@k;*mS!#~KYR6ZfKgV9R$M%<eYtQWdzu6CguJ`}-cK44C3jV*n
zquqmz|8E^nga2=>@;pKKEl-3mY-U}NU+R$-7uCb7Syr+K@vdb-Nx5aShRpx8mH&$b
zfi=kggZ;hY`TzT`cK0^&e;rRIj<hlcY%SoB3MQL<J($nju>o%^)zYyshOgHczWf5`
zwi2eSvefFdw(hM|v9d|1B`Z?ZA!SQdt14yfV_JG_mD1q?Nwh%idhpl)rFF7hp<lio
zF0>8!M#W#z)1dzwu7H{==0t)w*?)S6#q%GIb`LlD|5~16{7}JGoGSZ;a~Q3Hr9LL8
z-VD8(!yjh3JgVKrQKgurs%)CPgT4Iai*>bVs<A)>wyCjB*I0CxoF#DONyn{hp5;7?
z$p5yUfJXU$P_+LaZ0>(t)AMNZKeZQcB>zV8Z=OebW|#l7djcBde{X;PsHp$<HvZrB
pJhRyU*S9!SSs&Uh6&uO5c{b1H**wk9{|x{D|NoWLHBJBo0szI2Z^!@u

literal 0
HcmV?d00001

diff --git a/charts/latest/azuredisk-csi-driver/Chart.yaml b/charts/latest/azuredisk-csi-driver/Chart.yaml
index 8c56bfa20c..582bbcf620 100644
--- a/charts/latest/azuredisk-csi-driver/Chart.yaml
+++ b/charts/latest/azuredisk-csi-driver/Chart.yaml
@@ -1,5 +1,5 @@
 apiVersion: v1
-appVersion: 1.31.0
+appVersion: 1.31.2
 description: Azure disk Container Storage Interface (CSI) Storage Plugin
 name: azuredisk-csi-driver
-version: 1.31.0
+version: 1.31.2
diff --git a/charts/latest/azuredisk-csi-driver/values.yaml b/charts/latest/azuredisk-csi-driver/values.yaml
index 34ffd340bc..b63e9b0b31 100644
--- a/charts/latest/azuredisk-csi-driver/values.yaml
+++ b/charts/latest/azuredisk-csi-driver/values.yaml
@@ -2,7 +2,7 @@ image:
   baseRepo: mcr.microsoft.com
   azuredisk:
     repository: /oss/kubernetes-csi/azuredisk-csi
-    tag: v1.31.1
+    tag: v1.31.2
     pullPolicy: IfNotPresent
   csiProvisioner:
     repository: /oss/kubernetes-csi/csi-provisioner
diff --git a/charts/v1.31.2/azuredisk-csi-driver-1.31.2.tgz b/charts/v1.31.2/azuredisk-csi-driver-1.31.2.tgz
new file mode 100644
index 0000000000000000000000000000000000000000..0f09b861d6651238f641b68ec8e6a58a8fddb7ad
GIT binary patch
literal 15111
zcmV+iJNU#OiwG0|00000|0w_~VMtOiV@ORlOnEsqVl!4SWK%V1T2nbTPgYhoO;>Dc
zVQyr3R8em|NM&qo0PMZ{avM34H`;&eDG>C0VS7hKQCIi!9LI)6QoD89mK37w+1Yj<
z4^#z`7*zo^0E!aZ?TC4h?|Zp<k}q(nJL<x#WSg}+ZLtbS+!BdI<}U&Gd&H23`JLl(
z?05`M5ZgH!LngXY82CRd<LUK!y`zHz^>44&EB@Qt+dKMU_u$q3(b2))-cj#|-tOVv
z;qDKhx0KQwo`?&`e&{V+R<Utk$pb_D0Wpp#>4VAc77WAW=Wcg@x4XCHA?`993ia+-
zvI~&>0!}Cq5EI0}Ku`up2%Hmv*bur1yf_)0zf9g=`OyfIEdm472R4S=niR@>>|XhP
z9_##{KtDo!X#${r{_nopJ$O}||A%{<`M;J22XKV?TL9cbj;>Ki`yg;xH^45VoDN0T
zrNI_RXRS;M07D_=SWq_YgB{BG&Ruki7(oJY$wxamu2MM!97zGAr?-3&M!tVVee6#A
z;Cy&N#T7#w5wQh;%kdSX6D&mnV(m(l+#9BuGG!iice}k7MIH+Q-SI5tL6aj>*g^MI
ztHQ1k$G^`~7SkDWeYv~WT$Ya~h#=0d7`;X9ii@*^GE1hwz3%QobAg0<=v0Z3Yc#@K
zFgQaiWo9FU92RHKSD~@ZTO6?ocG0ox(ufFIxXTa}s1F2-5O@auIz~kOy$wuS0Ci#x
z?y>KKTV%3$U`QF5(x?jtNB}{>5c(VeJd`iNJtXR7#F6~X0KF$&Sso>VQQt?b4-})M
z(;@lda0s4(3m70khhSjpVJa<&W-39MEW$IrTcoKvZ7yn@z>trrI4RUOe!pOKx7aOo
zi~TPfkyiw^wle*de6H#@NzSK{cS6Y!j|RwPNL-`@9raO*0<StX521_tK(e62r(7T<
z<b0prp9P_qo}_vDddRl`Km^|U=!U`J5WDXnfg{;p@mG<1e?^(-gIBM9{BcWhzK>nV
z`#_4m011X&u2by&=TYy#K2666`eK|WlX+Q0F3CH{MYd%1(hT914+%;?d6>&OA5S3m
z;Vt&Dm=2J*pdR9BqDgQw4N)I-I$Ho_WawWhyF=_|%n<Z=AMEzz#EWHK`D0I!;`~H@
zzqxsPP6o)OM1FO4WfSS>Et(*|4-RE#J_rVn*@*YSufJ^pKn3z|7<4fi>E`R+_R?zV
zG=}pons`K~K6?l$6NsG=FQk}=KIn{v2>UxbK6Rl#rd;$7_IF>&mJ8}52Bn(IbqySF
zho*hdQS*yYA9YiS)x~rtP~*^1X#t?2%uQJzbj}_y7d-xehC}4ak}v4M9V0LDQKuDs
z)1FWc>B>uSmQ>6M!ved|KlVII_$BeD^U{=qbAiM?Wp|0>7Gul-M?zpS0xpewPs$y`
z<(?GFDH8yXA`S=@z(XM-9-sug8=S}4B}c+r<nuoG{6#W0Ayk;**Kb1Vz0IZwsdrpT
zB)fHheB`Q@X-dN(CRj|(Plh;+n2QWo*_0bO{{t*|{7VXnKrNJqz1}-)-ZJ#h2=Qzx
zH;m-e3rgAc;#?)YW~D{tw3?NcG%zcaXfEww!O|?Exw^331q&<a*{kWpEu}@Qa3Osr
znI5qT@_+{g)b;}IQvpa6+#&`-#MI2$23pzcPN*LRNVDo&*<=tzT*%4&|AL;LM2g-i
z6z~-DyMa%|MHKYaM;?Vz%>NH1sg6;xmYc65y$GJ4{={f-{_b>;E;9jqcu$~SFn!bq
z<)y2|TD`xu73)y_Ez4S#syG%^YYTv6S60RBZIo%AW;40868&R0)}d<^`CQQ_ISs8%
z4eSk@xfT``Rb^`G!J^hxkoGotUzYe4GQT9#S0(B`s9BMWfe$&aRE}&~^Mt$Vn}>WP
z8xZ&Lsr;?8g^<Aj3B;0WVd63rAR?gO2hTfl#&n*8XCRpqK%0m9K!4i?9aW1Cc%ff_
z+bQtS5JtXG+b3-^yozpp>;g3#w*e$xlFgcYAfS7vQ@>35Pj~toMx#)wtJX@L{rCCc
z=KSIfxIP<PzP~;>18=S`-(P_j=R>6o@DRCph>^FQ@K&<v<AO4&Mi3yz2ynUCi3<fI
zSt@`WnBS=-^kvG|+*C`zk!(u<MISuBL(|>Y6X@@5-=XQA{A=&IW<k%xa#*0B;kvCM
zf+Aull^Z_|REy)mQzC3j%guDVBrDQ&Iqs^_H&&ZxQkvl)3SzlShem<dU8dNJr_$J#
z1#>w%m>^GWl9?w}FF{oXfC(3nxCn@8h%y8D!r7I*Qj+RsE8s?4(BM5s?0AHfRxTC3
zDE>W&hC}?&2c65oz!@Vy=)@MNH*|3N%iBa6SFk{*^MX(*wE4?zaC-Ka_iwhr`NdC{
z+u*Oq*B9p(Z??hN_4VboR5FDKr67Npno7tQ+24ewzqWi#qKBM7H|vSVZ5tBRMbCf-
zQ9ubtLJidxP>ZFHL?7%-Alvcr?T&e)cWi>uKJd^jhQ!)D{b?Hvkw+O!YIB9y@G=xQ
zz`sLntT&Zg!q!T*WLcXk>poyUWj{o0c*W=t`$+QX-w7q?@0sPD45?h;<JqNcH_znf
zn0<#73>gjdPrX7Yrbf_{lSQfqYuhNu6vy$at$4-240)#!!(?PON0^MxM}#J?&mNE)
zsR1`~C|lAEVnJrXaX<itJ3e~|8R9%0mGryX#mU*6d!OCCT~KjO3SSLt7T!vF6U;;e
zeJADc!rHl3^}5nH`2;lj-QFT9{XHfgz2`RJ6mj%3<>HD_7jd4r?RX36<=kUZE5V+h
z^gm7@`{?7_kLKm`6-+?gq<GAfDx=tC$s$fRcloxXg29FIc`YIvG4xc#(BWJ&^<WV(
z)Li6#U6CsnL#m`LWg{>!0j=>X6@F{$*)wpBhKM1hEmA-U0+fM(G6cA?CUE0Lh&b}V
z{TLCoEtG4&+6{9_f}vqw>umj<o&2=&sLOW*<ad0>Rh#{YAt$7s+7>E-w<GB}ikK5J
zJb?nmPNwP3*0X0@>eE%^``WyrP1DbSV^r*p$ttPnDtETFq{iY?=$(6r2s2|`A0r~p
zPmK!s4E#z%t>^y+&WCDmaeRCVV5l~z@{4hqFb8suM^e`glpnzZ*wB^wjoiLu_a*`n
zNQB&z$XBi(alO@-suLnobuvlLPr*GFW0h>SQcV%(r&7onT3Q!Y40XbgN(ud+u#dEn
z<sA$Y6B0w7Bek;)pyR1NR{V!RLFhw)_|C=U&Do$U9>gMLG~vJYk9G_AkE2(I`y2en
zI-Z+xY|1!Qpsv9=&?}P^I3u(9@=)m0De|O*R(@_HYr0!oHx#&I<la>f38}{c7f?ie
z8-zZB903-Q{+3Z9UEu@AA+aI(_2<u^dyQ1OZem^rU%n`nQ4w<-Zj_4G9T<iM<w{a2
z5dmMmbb#aBOPymQiSkdw{QopYeux<Fig11?Si}6^Jvcll%>P$MhrP}GU&r(L^Ui;O
z2@d*7U65<F)Vf~>vRm9S>VyB-`SN9JOC>vd2qE#57C{UUL@6E$Ev(Xg{_GfQA?PHW
z)s=}mz)8O=TW?pRjMW6~e$a?RneuXi7{eX{f5_b(alz5P`V$A*E(khKN(>QC{jDo#
z_K!o#z!>>Ks^f#2+UZQ1q}gG~O;Jg-#J0{p=-32|HILD!oZD$3R}7%3%4jss&!0g&
z7t0;mt<0UkX;qoJpN|t{ugNBRsLRJYYWQ+VO_QATO`P)&<yDa)x%1}^=zQuZTIGR|
zI&z}c%i&0r@Y<mWQ{6iqVmwUPqo|;RFJH<^yUN5M8KK&IAkph(GeL%*?0-66zC89^
zUB%NN|6S%eStr|EnBZFZzk6`BzhA)r?(H7*4ma|D9Zz9~CF5)iXlfQZj<c1G6M!K`
z4+0Tox#`~hsAbOX)*U8ZADk%X&b1M}r$||nFeO_763~MJ_6yc4?Q2evh9g9jJiCps
z?;(~GXp>&|N8>hzA$DLGGCDzCUj7+N9q;e#jIbC-w_TS8MgO#H0VB}Qy2+J=VCU%Q
zuoHt8F(o%RKwQ8e>;n?{e&TU6-ZPUs({)^jJ(!N!;vrHX$dPtiRwdJ9O>gL)%)5V$
znTm^FEFa%ut`mfQ#GqfQo%+VdlxfgLY^0o+515Q1AF^V$EdaPnL(~U}F79msU`9hx
zaWY=aD~5?c>_pN?4WYUCk#pi<S4tMibjpws`(QB#3_)+2wE_t$mvBKD0?<^gYYb2S
z;FMfJG46w|-d=Q7?i>1^$2LPfOxMNNLV+D`DfJN~);bOW1O(lubt4FQJP&f+*6t~@
zuJNo=l$gd;`?R<C>cfe)bKj4#J2tMZ#Qh98ctKh0hJG2BVQXuM+^(kCm3lem0uiBk
z;lzhHxX=drwEY8>`0B$+uK8Rrje)bbKB*e?^`IbSpRQ@N`dg)n>B^@7V4y_S7SP*&
zAXi9LLc=_iM>&%{og?)fFtJgu=zv11mYs1OS5db$z(l#mIsRR>Syv#jk86G%Pdz5}
zH96cFR>%x^9S<vRAK>4MOk8~5RP&p{&{&`(v2_=D;C5<BRMq>FGO2Q>XTP?r@<nxZ
z^Nb^CGL4EUlMXjYr9dKP?qa!jp<QsL%@BkN1jHB$DbMgQv55{<O38-M6%q9PX+qQt
zG}k5%ndFv=aiIzd+hVW3pa2mbvDB-f@<WDzaxtkw1whap11iRdb-`auUEaMP+(_}G
z>xw)OGEA8cK7gZw*umViznar-X+%70Evv_Jrm2%Go7$Eyhf1~4!Nd_bKzZ>e;2k0{
z8%D%K%%5fjiCHXxh8R{iE4ygt8gWwopj+TUgM@Oj<YHZ=Than@RF6j$#EgottCv@I
zi~`tCy?*5Q>ion0Aom*NyRX1gm;<P6_0N-OtM*k0OExjOisYVrCucliNq18z;M29k
z2(fKIS;F{&$|MXql@eJ63WSIWocFh7)Wn<@F4wl_viW95sW*XIyc)d%d8Ws-Fi?tt
z5yNUIiY~z+fF$O36`3M;nS87OBQ7Nq#N=Az(h<SGC$yDFkcFy!jwsMndJKWS_9$w&
zS^%ejAthBJlA&jUCBZwXreHFpsfTKWMXVmXGzcPs#Z&|C@ogk1<2xRjAb*GBkpr1K
z#saw_VrWO|wyNqxsmR^HdzRQTp6BXXnuhvO3S`X)NF7o$mCmYLQC^a-&jvRs22Kt}
zvG)sWIZuZ`b{Hl@#PlF4^+zr9#-VP!RydU@39m-C0Tv0Tb0xM<)Sf}<hM}j_BXCZ@
z2@H^b0y$dw0LY%^j_lZWLlEozRYM@Z=h)vvTxk*R7&7Pz#N^y_xt_4e^i3A+LZ97E
zjfAjvgvD3tQsSae@Es#tceEf#_Cx%cZ4Z$?*GB8<=6k~~7gUERCMtX9bKPP%Ek<c_
zxq2w|zXaAyBJ>yyx+S6j+$g5Q$XASxgCG(LMhAx?k(iWp({_|-R5wL^tx~^ji3_c)
z%$sR=LAkaP1>nj?sZzr>3TwI(si2zaZX-z34)5xol{*?KKsb*At@_>~<DIS`s(jXo
zt0#6_7Z$o$j%P+s*Pw#vEmDT-;%+jD{fRd&Qi5ByaW=*Q)y!j0ULgSDr*fOpf>A2-
zRxk>zXisi2Z@(*pq`arIH7?Z;$^%z5L}qJQL06BP8a7J&sTn(1Pz5Bz{gR5dOyLz|
z7aUCeQTJ5oBPHl^XagU``@=r?wNp9sJHIvLtYn2!&Wa6MgXDc~*&-@V!{v>>C8?z|
zoA#GBGO9$WIo#UBh>wN>5bVoIjEyNt@8R?Usy$2jU2e*S5w}nHV=%%KL}IVDDt-(n
z2n3NYaOkI$b%pZ<*jEQi(p({88J~Dpn^+2RFA-RJUfZSx%$K`eAffFX>GCMIs9G><
zFqEy5kpTB`??KL~i`9~vLjh>nneE?pqo1K?z(-JIDaRF6qayo6VZp>$D)Xc*izzXo
zc0$k$Vx|P8wdaVcQN2ZofB>?)k`AS-9k+8^ZyM7vQZ*hz>?_J6M36G{NFgZ|#V%0s
zW)_-8$2Jfy6`E#_77&TRDyUJQP820#p@5py%9BMoElDiBU9M42b%KmuueJ4vF}YSq
z<&p)7!30|Nhx$38MCu1}HxO}SX_+Sb%v&Vx<zTcmpjh`FT=pxETo-XZjC}Cob}Dx>
z*n>vxfnqi@O`#OMSIL=WUV>XRl#CT|T|~*?VzO2$koD%5CP`hNyM@5EHZ<+htc4A8
zyNYHtt(^}oGz(EzSR|sGr?T5##u%z8V<D<0aXRY$RClR1UDPT#QzW|J;_~LqCbn-V
zfD?*65K_*u+%9nBMoa@Rd4%{jaO+swTGQE>+|Je(!pmlKFf+5yAhPoQv<3#xCXKmS
zG}seuVmD(wt1vJY4U6EM0B=fQfL*|gHsx|#fD1X=&PefORU2a8*P(=_%%n1<c-ZWd
zz;rut5uaq^I*ENoM2whCuUhIl`8BFzp*gy~Isq>9{Vw=PEtFQvUQH_&t*1<<>iQOQ
z5!aO0RyE!&Xh1?7;mrXSN>wO}6m4wMV#Pu@ku%B2DH}8`J0T--N6axk`6rI&^q@d?
zj;mpQ#294_T(8o^?CwJ@C4q^e*PlEUXp!M0)0S;ZgYghRGR<wrk`THv@<X{&3JRi7
zDyKf0AV0&H`~~i!u8nLKJ)Wk2DM@+A#U7HgQ<<d27)>))Sb<4|K*@NkcnM;~iCQ1Z
zj7I)cp<Bq2I>bXsgK4NnPj!rS>!E^ol(E7(_cV*&ArwkxWl9z(!6LP}3Zm3?BgW%l
z$WQ9Tob*1V$--pjlpejRZE2#g`v}fqh6)hp$zcJ-C$Bb`q&d5<hXlla;(;aVJSW6r
zo~zhKS8<|byJTLPRW`0+^{!4nJ{^sa2@J=H)rpufgO~u02*(0XP*(f2EJ2{zA|tFz
zP^rU2{qm!S^&awUx7m#f&9bAh)-|Sw6#38~VbX*d6|4mi!`6isXohX^tX?W>rb3&=
zGqVJ#>V6XRQ^b*NRcX6+)~}Q`3Pzm<P*F`?DXZjav2->rl(rQ?Y-@$?9#`lrTpw}Q
zxnU9NSk_r9Q4k<#pdhk=m>^zsS=6nnWi(E<D-zU0nXzjpOM&YXGR6ID1E9ms_j*A}
z*ghVpEWo37CfM}JMbt>eVpg38fsSn1r`xGOyuA*YnFkiK^XZVuJg`t~tYqUXuq!}S
z3Zy#!QFDd%nO6>^jpfxS7=Fq4R1`qt;!=S$cmUPFD7%xM8Abd~p{iKTl8j25%+ySN
zEk_e8R6Ij%f~je{tr}1_FGDB<Vx$lL{}&(s{D<@Mzh1ofwdefjZ-0LAv8(?0kC*@T
z@{jn(pI^Rw@#5EC-o3fGI{OX3{Nq;=1$X+_A1{7IXTP;1^77?>{i#%y2PXsFlsi7k
z96j%o`0vc<*p|t%z06Tvv{ji)>)jdpW}ldS6Wx}M0WxMa9Z0=_M%qz=-z6mSyN5z<
zAdqW<KrR*fxID<?GNF#&62$SVg*M(I0X4qynYJ=z)eICTh(Ucxu%L<#Ng-wGc(ITn
zH<j+s!12|27W<`#J0`@Ci||A)d-sqL<ySLjA}HLMBpp)1&2pF$&n(@h!qh|>@|<@w
zrkbdrQsq}DH4Xx(ra;`bY(4YEVM_k0>GVOTBIIKyCR4_GrnUZm)ZyaQ6bhO3_V@7s
zr{56FbUDD%4V1JRO1dQQ=msv@1}?e=faueLgnnxP&_$u13xYZqgl{ek)ckrOnM(j)
zE)KI?7*M%F=;Wi|6&FP(E(43WIP!2|oZ+IV!X;t|SAZB?6d$-a8t{9<{w*2pw<>(!
zH;m|89KW{&wBAy%c?%=)zE*a7N|?H3A?TKbms=biw>TDVDaf}a;oQD)RNGQ8Y>Ok-
z7RRS80gbi{?Ag;snk|AU+n~puGJ0$YSh1xb!yadqXs*Hni^QUcu5TQ_wG6b@(s*$}
zB-Y}bxG>6UNtmid5mbxfr8elOWuc?e%QX^sROVGZJ}R|BK-Wc~K;A|1{JW0!X2wU_
zsh=(-8dDWt9INl_`Vb#UCtq&PD{MZm(A5USm7iLeqF<_xE>tNR&M!2z)qG_+#n4Sk
zNq(XFqYdL6=6u7G<nn~s4mZr;DzsG0VJJ?subR*#r$`_cDED5xBdM~M#9IzAW;7b*
zVYN0ZXliy=Hvz`?Yhb~RWyXd;Pzfz?l>B9a`S#jAS=#+{585*Ql{j+J>k;+p04<h}
ztZ7x*K%~~obr)xF5+xVTaa@ku5bQ2jBCh=u#%ixD%7SZyASPuqf9!{|5Jp+jkRd=Q
zNl)PSo&fTqu*Pi;__FB9g)2R)$0DCl?!sG28JnpwFLUOSH3hQOk_Qa5ewmDbV%E+z
zlKc6NzCl!9WZEezXi1`YZ(}uE$I?_A4LAtLQ;uEeR|Wo3Qf>BBb-P2M=q8nFRd}I@
z%BnOMUJ%&vV+S`N5(PyEQsz?F^rh~|Rt%Y3NLs~+$+aRSK)7j*Nuhdd42kC}u~9m5
z&cbz7Adb!Hcuy7XRK9muKUsyV${1N`I><w8(xqDs<sF(jdK?27>TPj>@#5vUP+W$P
zy2>D4($k~A!Oa+PloeAng#V1xMQ0f_#e7>atG=Z^WVOpB#IUrDT6r=$@As<fZjjfj
zL0)SHS_FQrC@c$uJ<ncbnLCiB?>nC6ZexS<j{9`gJBoG4@L6^Z%i1TbWM{C9y}&o2
z{Xc1ae-py+mFV<ey%yiz*Rt`hJid2D%kVY0S2AX#N(YNh)8t|?Rj&52q<=NIR+2g`
z=v?{gjz=iO$h$NM<*J%<cBj=QKsn=Usx@0AyzIh}5hcz0Y}?XWp?M_2DXW3hqCneQ
zfoIu`tI+!;Y{@G_?oS5i@wyRnk%5mWXsksMOXc>gLEWk?3z|=AjtfwFbRGttRQneB
zl#KWyhZ|HotmdzC8}NG3Y#w9T4O_Kq(lr{YD^zP*G(%%_INYKwTC63i4mHiWD5Uwi
ze6ps83fM1wL<Q(j;&_<fb!={%B-EjPem(&!MA31u@p*3CHcxPi*AS(i3sO%flg5+Q
z+Jp+7)f{GGHvm*4*z3$&rFJx%xLT}D=~HXUX`@J4XfDM#W~=Lx%w@B7Lkk0%h2)Y<
zY8J}vjch+r7Q=_tkx6nBinYwQ&`s<OWza5+1P!1tWNZlIlfiinNr4#P*h4PN;*RrL
zamN&>C#hF`W0Omn_UCw(sC8|FlMT1xk@>bdXu`%`3gjEd9%nls=c|~7tKvnn`WT0@
zy%SW~JVBM+6VyZ2ZT3&l-UeE`@vyXcc0ppIsLa_~7Lv&k4=_``#1ohDA9#brl^=~T
zkxJ!@ml_#9v>p|$rlV(~(W}R&reEhiAS90H%9#mXP?qjYUs@_$F^vIbrDOl3Ecr*o
zMS4OS%vcF4`Lv++t^SmfxcxsXlX{D|rF@3Mp%yAWAWrcKd!6jXv-zhYR-t*xv-6UC
z;&V*Wezx~&a(ra%V1pFZwu;k5T6cIhxvjhPchlJw0wFE7@x+%bkL#G;sv8u+QZK?=
z{O+_oXSTdBts=3O8G4O*N4+KyGbkjFg?J$U&WEwwk7))nVCkngmRf25azxCTYXAP%
z|NaU4NY8?Q|Lgxqsq^oD{qMi{)V=%nzy43_1G)2P5F;FQ<(_k0<4kNzeuQlllQAza
z10(?Y;TW1TEM^hw^PTw8bfQbuX|k3^Rh};kE|Rk`wFFL<0Zc~QRYhA$Fp;UTj;^AB
zWB<2O&OAIEB6Xq$N9wpdt&;1N1=>jR$Q^HIgIjOq3ayB^NF9_QoN`p~{Nr+sEK{=P
zETn5REXXgbIn1Ug%wZrap4T%7k=t!L?lb#nMh^5EZhA4nJXr}nH^>(g32xh!VGlFp
zYOhB2pu=0FPm!?3@y({{ZtF^@gR<J$AFH)K#oeAckS0^zF$_c0UOTZ+o>yO~GPcD}
zj{lCY&WkWNGnCfdV&lrKTB@v|&1FA7AL_zbdX^<ddMFax9l(SO1iczHi2y_dW+)k5
zExWV@D{~wHRCp`JMBx7$Twd(Fp%o<cctLdxfC{-o0U}~s$q#*^kvchWAis12NbnGG
z(KTft#(&-Wtx6q`%!?ji5c+64cElwrSUiU?*WHm&R07Ykp)x%HLK+_$ey^G<mq)25
zLSw=6@g3@ejxvC!)%+~E|BLOy5Ba>%rv!FnqK>XyVjj&dBxxnJ@qppc2-)v`0A`z{
z&Ubn#MLL!%a)tykhxH^&bg9z6?)_F-<9vU~bsRl_J-tQ8T=vpSGb8zw2>2jNa;3IW
z)wAlLH#M6lQW22K3G#g>-uvIfsqBS#;LLHZkcnDuO^*1xJiYAenn{Klk@$?OA(paF
zANW<TS^#YpjeR8U7?M$P-rz725kvDG(NMM&$B)HgTofFSW^--XIMVK%!sl5}TW#a&
z&i<qm#3mTs@7z;%hsns1tm&Ael6KVkv-3>-Gk06m0@k)cxz%o!t&-*Now*tnyB6B7
zW6uXMOsSB!pcy4Hwqi124g%<*^yr)wv$E_^bu64abqr?5fy9%4>!V8D>0CV+;a1c4
z{rTy77(Bvr&DF{+Z`C1w6(})aLyCc_WB;78T5fUeJkpiG)ym&@en05R;5=){w^g@f
z+TYv}I@8%{iD9I|{GC5VEpH=1<`kyHeV>{^z<YuptZN&g9Jy2-vM4Dc;!;l^Dhdg}
zL>wJ-!6i}ow`0UuAQh*-d-iKg|NOuB|GN0Q>AL*<({(1fQaP6D`0jtc>N&k#r?+dN
z*z5Jx|AY58C)KCJsk&B(w=C=|eID(?)9e{&W}B*xRQuY_L#tTfH#cv7Q)j2ar+x2c
zVNtRyL7Tfbzr(vX+aAwW3xKw@$Uvg!Jdw?6(3_c~OUI-&GRh<H^X!#eDmO25-dm-|
zbfFXAZ07RC&xEsTifvDctJj{)*@b=3n@O>1^5@t2@^Q5jKO-}2J=usZnXenG=lEDI
z?%FRZ$4Pt8%$N&ozwwnwg>A$T=QB9HHW!9&B4TEah*@GJ%-0?Pvx$6JYvju&;^iqv
zylhTpS<%TXhGiByn?=)D+UYDaMkReku}GT}QS`GpHsb4!Df*hDh#pDh+#H|NGO}mk
zIG!a$?JOlmXNHKJT0QO?4!~JB+-C9MnkODgv%J8WZ#PV4p@5i0LSMelAeRNhS)TIE
zwe!X?EIVpp;TVN)B_d%B@dt}X8!R)nV9`i|WyK9_q6CUj0t>|hECu<$7{-55H2=c5
z{iPuE7s28$g1TP>U%x@p&)m2Tl754v-(co9nE4H6{^{NS-E1QJZtnokI~5l}tuKsG
zUlfu4mEzC8Ikfra_U&&ILB7(vw`W9$Z|>iIO80Ls1;f24VtXn0?9DyeU+q2GUnxR*
zVLbGr=;x<_b$+7Pe}De$07N|CeEG8V!{(`f;O`Mb9_DwB%dw*+(vCnus6bph@?|DT
zaxF)93Io4w8NFVwcXV)|{_XX8g@5<=4v&t0*gbf)e{^)Pw|CV0p|`icd(`^@^j6z+
z{X|?q_Cs&svWkuSN*+DcPEqL7X@H0*T<sF_oyl(Qt`-e-{rnkpKWNNehAEVB{mYlF
ztTj?4y+%HQ9CcH><Cia6pFaakTtD&<=p;PW_2Dh@c?WdCAIj=Z1lZH59lZuy%GG%c
zO_@>9zrnyyDICNUq+Dnqmbr{Zw<UKwP0IpeOdCU?k6p;CdMy5~OXA2!u88-o0Tk}|
zt!i2<Kw%g*_kBEj4V7f<TKD&nrZYp4`jPF&!zATBWp_S>-nk@-#k8wIi|3~~^0FdH
z(k?b>cOs7Zpd+N-oTJ}j07L4%%`$`;t4srboPixe>Kzw3LRGxL70so90@kt6T{wUv
zbQSsj0J#i_Oi{%zx$>%V=c`fbK>cD&xwt?=c7N3%XOg7(qy~UpbnL3V^F>i4<UePq
zr4$JD&>+X|YT?frohk1FACu^zc7U>!T8}tTh<6r|OLC$~UHOop*OK8B4nlr;2f0AZ
zydwr*!T}l%mCtqv;80y>HH|%U9BBo~jI6PKaPUHeKIqu{H=*(6O9ymcf=;$QH;4ti
zlOMoJxs?)%S=78q8Lp~ltn8tF`dsZ3D6>khV*gbp(p_0uGtCdjrMIbedaCSG19yzP
z$j4-KJ|Z-EefEIdNR%8zrJgMA1spA7&mQECm#5c{WuL+<t!sTotfeK~p=n>$#9`D&
z`K!rxV*gJlvs>&+G(-%_83N7}dd^xqL_AB$4fQSzNb4F0klRnEnX#%RQ4}&v85YwN
zL}m6;j;pT^b6kc+<~k~l+(>1hM4$(ejvPm>OM~!=(IL+7|MX7gIwArG=v2qH)XEk?
zeZ-2AKl5@1$!|uaya0!((5_mAQ*c6dlcqH>siCKcOSWakeGK^(Lqq%kIy;^GD$#X0
zzDjdQ9fWc$D4T*DKd8k0oZQm+Zy`t5D5T)am(sU7+Wn@~0*<5@+)5-*yZS7z%<OOh
zbs5Hp7yXSL#~C6hB8Hri+#|idp&|9@XsQ;9?Vl;3?CQfca(##c?Ua0-*JBboYIo&%
zQuw_7(~INN)9bUr;H4$u<n^BAt>j`FiP!r*Zu#mX=pp7P`G+ZKPLW>A{JKhKw-Awv
z0b-6AGXy>U+P=tT81%0y{f$m;Cy5>egN_CwI<fv*)rVX#><UL@2f>m|N-+n9*!gG3
zUmy1BQrt$2i`Tn7TO#G$aa3f}1o}<@A71bGf^0%WCPj`h!Gn5u3vy8z5c@!GwB`T0
zoVs_JBolMuctk{r5d-;F2QbR41;V;eNe&6e!z{O^rdNf2c8Z#0Zg*l57A6h&0}vyn
zcK7l#rcx@)$Auxh#Xh!1)-W2D*XQH6Z><s!3IW}5YjJmMk}qA>*$G>PPLgzfDYtNG
z?c|$P+O(Bbu~6FG>)FK8dZbb-p%n8_vqZ`Xk3E}UC<u>(e46#hgnEgvba@bS*y9U>
z?6HZp@*siNB-3P&W?hzSn4yq<>ufX2jMdkooh)f9Hr68->h-7!ku{q>@{}}$nmI3@
zYH=~2M98qp;|m3bIR3r0f^e-<FI_*d(zPzwamx9%g9Xc4?tHe+v~^7K=gwHUaveP}
z984mP9EJCJt-O=ZOBwRpxohOo31T|_<?JDZ>Sp_&Aoe4s4TMDssnWA|U=<+Wu}m<m
z_PFxE#}h;l=T6AzEovhY;v82p!*ZoU4e9b^%_p8yHY}^eHWDIl)Tm-mol=cPYQ^C3
zz@UFNIU<xvzF@qR6vsk@PJB?tYoEH%m)ZLE4M4uBV+4IMzM@Pd*1J*{n^IItC!|bN
zY%Llo7rRmup1j_Bg0nc+nDtKNT82Ob-umc<!Ql|Q?;wFA#7dmu#M2^hSvSBgqnr*!
z*QLP@yyH8r8_NGVFcMU57b7nE+Qi-6+uPmU{js}OoMBgy@0;U4!1?fkiYpD5%cRqz
z6EgacjYlxR>Ecip%WpP6)-ayP^@d@&>_VfEX8B!XVqKQWtK5KA!nvx2j0);fzYlIs
zu2#<$g((zIiNvnnM#`r~_@zqt3bJKcn<ku7vM*XvOMCaEO3cyGTQos_g&8-N!+&~l
zGC2Qqc5!-jd46$Yvu_7TFzoVV-RO1I|5eCsliI@FhMb4F6b%lXa3mZ;Jyc}_GAWNI
z5c`@DrvoG|WDYy&N#KZSh$_fUf}3erVJO$wD#@kU%;rcB1EsL}2z(l;;IJVcIb8XP
zoFb7-4OH?Im0CNME@q~j>f0^J*LVl?(RNP65p&=O5n*Y&PV=54b}Uoa38fSq9u0^1
z!9pmCNeom9J0a-%^xi>1D5kj{s4^1D<YzMVN!s)(*5KT6p*u#75WZtVUMe|-^Anl&
z=H~4=8JO^xig~1%*+^g~&?2~ku60qgk}c3%XjRGAlnUfa@-8M--71sZ=oF^PUIhb<
zk$b0((sTTXI4<>l<%F=9U!+81D(?AD8kXIEZSA24!Qe3)@v;W?`E#805Ae^3ijwwc
z6`G|bwe_N!7i5K{POoPsN#R?5tu-s19e&ZQHn*y3oknY`w@&eUW4%kgnJXyYt3$m9
zzZo;c$JF=w;4t@HYX5JLDC!KM)`R03Ewstdkf}aMwid;*=Ip|%?M6&7TY1ao0TV1R
z^iPowr$(0a!G0b#Z}wTq=iU705HU<Wd**8E#Q(g%KKpcXeRg_wadUqB_R~-2Z_jMD
zik}#@oB*aJ?>iX&f~MA^T`X`@rOBKyq=16Z{|Wo(BqmetJ^3g+i(~@JHyY~WR5Ayl
z7TcKBUF>F<h~S6*&QA4aw>&}3ilu_BujD=fbUNjksVngF&CS)|)7ACmfB(&1et9L#
z&}}2Z8fw_4g0t6eDb*visd5*WvsEpo*sfyviSXv~)8O=%Pj4^Ze0qEK;p}bOG8Iq1
zp@Y+3-liJ0tpl<`OR6KFb1btC1a$9|ep1;Dx`JmHAI`5YFW#M9+^DH~b$s)4g=rB9
zH**HSj;bP;<*0(Y|KOC&FmkO`0BhwhZ_eI+8k}8!I6pc2baDL7Dq^a{Znhlx_dtVF
zFACu0Qh8_peRX+#b9Vjd^5*STg9K<-^4WtrT9ci{C%Lxav69W9W^WfJ$?`N-f+8tq
zE-;LhkgBTV7O&SeOah4qUNp1#OYkBi2oykA?&Acbpff}sWw7(IYGgSt-W*YE0_XmY
zi^><DFa*6z;!iCrMLp|h8f2~OTC18N?u2*6(JmGc-r*e=I)X)9>?pn26{TCLX6=|c
zERYF@KZYAYPaX^M(mE^D#_|+1bEQW<hn4-M7Fj+_ENq@s8qIpD&V-|EddYOq>sGe+
zS2wHdY}(kEGS6C=WR97$wCYsPkVaw+(<Rf;$Bz0+pPAzSjJh&Q?B5TK@qfME;lW-Z
z{%>#Z@Ng6Vw~i+p?pL}&VM|8`o(#^-<t(*<fO%79F>p@K0GDG;sNR+xo2Wr1n0pp<
zQ=C5zw$ebq_^8QboeHUUPKNZ7D8(p^T`s7s1|48@)Sm`#7>z=$WvNyUdFD+Y$PMXM
zHrnB_N4Wl(Y5uFAkb6u#de0px4nsy=#Cd~6sGtA4he!Lx_}{}<NBf)kzm6xXBqV{G
zdW7R$*~^^z5Pys~`dKcBngdRf2o*KEl%`-piy;aq8K5~Li{qj^ezDHL;<(twql#ln
zOARU3mwF5Yg943Aten)CF&VvApJM$afDi8p)SfLr-?MTeck|z4Wy-`zWeLs`nQR-o
z)dnV)OROA^B}52kNUbP5c(xc@Iij@{U1}&>+vr_Wcy+Dj4&KeikXFyTOi1hul#9`*
z<!I|{_2YCY)!km3utv3*7GfIb4-s5eG-UkIwD2+%#jx0MD)mcSeio5q{+=VITiUs}
z0mtuee!jduzxmt8kAuGrZqDAtPP<&}d4`Vc%#)gcNBRA01b3v0Q@B2yN4d~d*cU61
zO`VY5BgV(b_q*u90+x46uP)HNb1qN-)PEJ2A~A3PNAAACN&n-=31lBX`uO(aM=5iB
zBtCu&)wL=7<HyP!$;Xet`H3<&SCN&Ojp|}{)zsIOa~K+7E*NZuRF@g`4(dA2wp{LR
zETGJCwk&hPnO0GHk>9I$Rqk}G<5FbZ3XD`97~ceVGHjcaqQLGU6yw)_dU1Mv{^9KU
z)AiY#PlL;oUp`$O-~4Q&p*h}4;_B`DH|H0M#Oe8Ui-_V%4{vMlr$rMpjg(U_o}JZ`
zvjQb-?uNB=iM=)pNQc@Q<a>0UvOk%DntuFfE#a5<e>wYfad}$p;j%l?)oFzl-t+XP
z3Z+`A*^;@@7PON8wkcM%64V>_W5!4=`xe@d8!GTs<42#UicuwU6H0o9v=p>CFsj<f
zE)9k%sbTN+pI+qWqAls1XigK9q%D$;j{|H&MCw#J!1k?7V<*OtK8ewh+h~oE<31G*
ziGore#c5BWfTx(>4SXstqF{c^siL|Hv}rZrZw_awnmPl*)SMLS{7y-^%go3Bp`@aZ
z3_3GwzjcfOw<?%*WZ=`-bB2rt4i55wR#osw1E$YU<@$8~?sPC0I5b`xnvtR32pTOO
z2uqq}qSBVF5N)t*-#V6U6^dxq_CML3PgDJd(RL^Ok9QxJ1hK0Zq}J-rj<2&7vIcNn
zRk4qTtXpAl+j@?#p4<OB0}7<x|GT%p-#aXx|9sHf-S~gk@wD^*W)`cB|99j6-S~eu
z{@;!NcLo06<$7^fbKq>@FqO0>Eu#!h`X8&}42(y^!>ycQn=@MGJfmf1Z&l%-7V8;D
z6^Ei|18sHW<2qbZCw*nhuo^U)Hv##|FU#@qh=-~a`*Guqemrk<rH{jQPT?9|%&VPr
zPsy?SO}Jf~kBW-9q4un(j<u7Eyj5DOE9qI5`Z#-zE1QU96E7fhH_qno?y#bbe|X~`
z-uQ>x`G;d?uY<{uYJab`!PwlivD23fsaziubIRA^M4s``o~CV#bvxVU44m}+$`8IN
ze9WCIll@{nOy;QmFq!@D?l74(y6>yi=#4Xe<BZ=p<2TOujWZs6mAhbbAc$IWY6;kF
z7v}D_hp98<PKZO~l%{ir%*T)2k22B6Og8Kz<BllgEEl2n5AzhFGB%PoJD+(9Fj)(^
zo&hmN9I3^c1ISQvb-MD1cwk5waA^=if%VC+>PG$PbA~{~3&-3%(-(l6i~E(cZ4Bef
z*yXERBp{e*sT$wMe=;~P9RgiHc#_HjBUsK}Ka4W{-aKPj&e$}dvlo?&YBB4qW}l~d
zdQijMtvhU{^+awxiDxXWIHPBn%`=u%p4v;B)=QewvrOkj1~pG>ws}3@@aCz^I>F~1
zXnUzO=Hj}7S_P%0fm!)2ZvJ?!QkCqw#Qe3Hsc@^_v2ah+I8o|qS2}sDLA|M~XGzzo
zDr>zk$#3?V8UH!+>0izG&%^y!1^nmktG(U^|GAE*uwT{Z?3o?vGBBLx;J)=DICY_m
z<2N;(?-0FN9<|kCH_PSer)W)~?9QjqJ6HBvG3~lOMns&S=4i`WBuTs2q}_=)>Vr-`
z(5-p!mjD$_2(1VxTIi(2l43A^X;H;5He_QdcfJ~>ZcA76<SducxMmO4PqKJ~$EKb<
zYH>c?tIpdNm#XSjHBzg=q#9YWDnx2p^{0qOt>}%VVv?UG+O^G@+8eCvS92esT6&js
z6JeuIx$07onmY*F(QI@3V7--1&)*H4bpvOeaR#P$2A7h}3|MX8;N{+_I}c{HqzR=a
zmmOnr*{L+StnFgoc|e&vb3rnTQey+i+yFAm=~n~DG{~_Kv7tjlfdl-zV&2!KNvcy`
zAvV0sq+9BxjvJWg2Il#sVV-&>JWY_Nu3HtvvyA9!p|d{~G^kaqKEjQNt+qKc--S5$
zhG%mN;^r2_4On#pR^5PAOO;&FJ&kp1thL^=qgKmBtO2uXFZ5|19~Ck@!9E&gt}IHQ
z#rC`Fxe~I@{9!dMFdD*<+HLj0U$CbzA8KK;Rzc-a<F&e*Df5IpG_hv(kmT8hTJR~~
zxsCV^mkXrMQ4Ag-u|LK!-&>G$eaI`?Bnhd{wwb=UY;)yRee#!W7VU9ONLdS*wI$|k
zcJpUmYi|IY)kvlJt2kE;DumL)9hHC-=c`twWw*X!3*A3jBU&3uEy~#{G-QqZZ788p
z7&jGJC8S%FYmwM(O3O>~)k^Wr<*p@S?Jsxzs*tHI@SpKzn@;9#=9xgC4fj9x4v&iW
zzwY;XM;rX-I-bJ5FS%GX-tIXm2o!}rod$@^fdWm)#($iotVGs{46Uok;&{<I>PtnD
zG8FpQg}ikq#~F0dGvh(qjh_n5Np9=~ski|5lsp&U7J&e=JLCb#l_r}+-%NJF$@QrY
z=ZR8OtD=bscy`!3$kBGPw6X64^ne9`LxC88j7G!*ueyhFdrgVQWhq!FVlI>w8Diq)
z%H<S@G3MG}0Qi_jz9*|YQW^~dVhoA=k0cUcaxLqgnvf4=m$pLm4k9)}eb7ta<S@S4
zyk*Dmt`>mXW`Jj6_a)$F8^}M2V^_;nn-`1<R7e_&$R#nvu6#(4x|st|roX&{Tp(uN
z5q}B<yh9wI;Sjk(>4P!&6LUbQ032zrj1lw3rNzMu5&AhqKxS>vU{pJx`x11r4Y@%q
z;GI0`GB;{=Lh<k<2-Y}v)d*SD$HYH`hq6m7MV9)nGLi1e%9<4sx2aCZ%st|#5yNCO
zaL34t<V-yu5t_U{dq8fa3|TpSvec7hGo6ygXAdDmoENX&OgkmBWY@Lc;t6uJCrEjK
z8TC;&&ya?i6UyusYdZ}QgOZ`a*#qV!Ye@Fu^BL=17?9RA4phFyt6JKsR70g*Kaypx
z4K1DNs;>YtJ;$<AiL|P|=s&OAECYTuds+QibI%OaT6dimI-k@>&_m2o@(oi`b*WS#
zSpoiI)A~EDEt>T@u*q42F|2dywCc?@UKFzBIL=np{_TS@)g~2`BFwU<v!u#x?$YiQ
zl*vZl{itMa>;0as8tH~1r>y~{0NqG69CL6#h5~qKhza6aH;;!;ZXO^QQ+n40f5l=<
zBcT)cm>?DFZ%F-v-bzX?B^-N*ArFL*i8zv<89q~qJ7eSrT|VBCWIKHjQZ5`!xPZRD
zrHvw1FS%)nhkPVkQO7j4p2+8ultRd0fP|5&n79nd9XIsb6HQ5UGx>Fgmk|VQNyWYY
zhS4ZYfCjm@b5$`<H>qSIhy)x}>~b3j%Z&Bg3L63Fd04v~)7?w)UBwc+XW7rhX27Rw
z5^S*lv0Lam`5^Gwt$+>ozk|J_Ucvr%&^tWX*#Fk?6xI(p-d$H&Ju=J0iPm?osgH8Y
zgGvn}F{aF*q}whKDyI>j4tfxX5$HQ1qZ2GiBc?R{8LfRR^7Z=Z02pE=QFtHx+UfkZ
zRnQ!M?S!%oTp%KhQ`01xAa<(~jF9MTgN~26`uARL%j6%rbL3xP{7Q*&qzKGWvg<<}
zv@Tx9kK4-1FVVJ=O$y~mYT4kHZ9)@7#2j5{T9b6<T+MPhmV3jcHfSM&6<U+69K(Dj
zLv4x6EJ(`mrV+E0=Tgc%OtLfGR+dt%s%R%%5O<@QJvnYDPO{&$vRf8Mf5F7VWV8yY
zWX>i^1k$Z3YBrg~quYNVR~WIR>p#fZ5LGXgHR!yZ(Jk2*+c-<43^lOIvLK&dDuaY8
zYC5}W#8$e1=zy9hyn0lN@1;v2g~4tsJTV#4`Q=?p>7z#{m}RM0$^ua;eTNGuqDQI(
z!?%$@yk-@CT9Wrs1aC5tzgwxB7iCXZ<i;w6SiRJ>Ynh9wmsUO5*uK}Lj4h^*FI@>t
z`>$CbrXr+TG%i}d3TfS9aKAUHnVpN@t>7#Pq#0!AdPOHg9RL3GmDO3r=K=<fg-V!T
zPONLOc|>{Cu3xFQj!i(b25c$NIz3k`PZyY=-+&;^wf?b$s2qmMAxb(YK1o7Vbr#uJ
zqw4)u(V8Xj+-!}CSMsONQgaMeJHGn-IrgeOw!h?CduI3l&3*`Uz5lPbyMJ_0@c-={
z?Y`Rh|JLy|`2W@_&l7~-@<jN;X4Vz?r5<T<Q9ZnxWhHwM?^+g=lv_4y$ox-R`M*dI
zScCjO*xxIj|G)og_i!Ws*YRZHNGoH&)&dTxV6xfQgZa!I8}P<bEgc(U_<D`u%P(+l
zD`CniORY|8>)uKgE1QH`vLaO-QnpmJs#4ZIrlrSLDIG45L<`ie2agR<S|{5T`sLf<
zLfe3ERQwe^4f?;~3aGhaP9%7f{ik<WJpbWn_i&^CujMJm4;5_1sj^=<htVon>SKcH
z&Cshk{9%^MquN~@Rf<`v%BIOX*vntOSXYat8Vf{Vn;PqMjYVh4Sprv{bll43S<bVF
z{BP?CXq5j4Mf?B3=KjYuJ&z{;Q+x47@^2*n=6R%NcKJWMC!j(8_xAUXiu!+V<NsaH
pGmHIyeTzet^`YHTv5{PxXY*{H&C~q+-v9sr|NouJVXFWH0suu{hL`{V

literal 0
HcmV?d00001

diff --git a/charts/v1.31.2/azuredisk-csi-driver/Chart.yaml b/charts/v1.31.2/azuredisk-csi-driver/Chart.yaml
new file mode 100644
index 0000000000..582bbcf620
--- /dev/null
+++ b/charts/v1.31.2/azuredisk-csi-driver/Chart.yaml
@@ -0,0 +1,5 @@
+apiVersion: v1
+appVersion: 1.31.2
+description: Azure disk Container Storage Interface (CSI) Storage Plugin
+name: azuredisk-csi-driver
+version: 1.31.2
diff --git a/charts/v1.31.2/azuredisk-csi-driver/templates/NOTES.txt b/charts/v1.31.2/azuredisk-csi-driver/templates/NOTES.txt
new file mode 100644
index 0000000000..c198152ef1
--- /dev/null
+++ b/charts/v1.31.2/azuredisk-csi-driver/templates/NOTES.txt
@@ -0,0 +1,5 @@
+The Azure Disk CSI Driver is getting deployed to your cluster.
+
+To check Azure Disk CSI Driver pods status, please run:
+
+  kubectl --namespace={{ .Release.Namespace }} get pods --selector="app.kubernetes.io/name={{ .Release.Name }}" --watch
diff --git a/charts/v1.31.2/azuredisk-csi-driver/templates/_helpers.tpl b/charts/v1.31.2/azuredisk-csi-driver/templates/_helpers.tpl
new file mode 100644
index 0000000000..51fcc8a092
--- /dev/null
+++ b/charts/v1.31.2/azuredisk-csi-driver/templates/_helpers.tpl
@@ -0,0 +1,26 @@
+{{/* vim: set filetype=mustache: */}}
+
+{{/* Expand the name of the chart.*/}}
+{{- define "azuredisk.name" -}}
+{{- default .Chart.Name .Values.nameOverride | trunc 63 | trimSuffix "-" -}}
+{{- end -}}
+
+{{/* labels for helm resources */}}
+{{- define "azuredisk.labels" -}}
+labels:
+  app.kubernetes.io/instance: "{{ .Release.Name }}"
+  app.kubernetes.io/managed-by: "{{ .Release.Service }}"
+  app.kubernetes.io/name: "{{ template "azuredisk.name" . }}"
+  app.kubernetes.io/version: "{{ .Chart.AppVersion }}"
+  helm.sh/chart: "{{ .Chart.Name }}-{{ .Chart.Version | replace "+" "_" }}"
+{{- end -}}
+
+{{/* pull secrets for containers */}}
+{{- define "azuredisk.pullSecrets" -}}
+{{- if .Values.imagePullSecrets }}
+imagePullSecrets:
+{{- range .Values.imagePullSecrets }}
+  - name: {{ . }}
+{{- end }}
+{{- end }}
+{{- end -}}
\ No newline at end of file
diff --git a/charts/v1.31.2/azuredisk-csi-driver/templates/crd-csi-snapshot.yaml b/charts/v1.31.2/azuredisk-csi-driver/templates/crd-csi-snapshot.yaml
new file mode 100644
index 0000000000..76df8af7e9
--- /dev/null
+++ b/charts/v1.31.2/azuredisk-csi-driver/templates/crd-csi-snapshot.yaml
@@ -0,0 +1,840 @@
+{{- if .Values.snapshot.enabled -}}
+---
+apiVersion: apiextensions.k8s.io/v1
+kind: CustomResourceDefinition
+metadata:
+  annotations:
+    controller-gen.kubebuilder.io/version: v0.8.0
+    api-approved.kubernetes.io: "https://github.com/kubernetes-csi/external-snapshotter/pull/665"
+  creationTimestamp: null
+  name: volumesnapshots.snapshot.storage.k8s.io
+spec:
+  group: snapshot.storage.k8s.io
+  names:
+    kind: VolumeSnapshot
+    listKind: VolumeSnapshotList
+    plural: volumesnapshots
+    shortNames:
+    - vs
+    singular: volumesnapshot
+  scope: Namespaced
+  versions:
+  - additionalPrinterColumns:
+    - description: Indicates if the snapshot is ready to be used to restore a volume.
+      jsonPath: .status.readyToUse
+      name: ReadyToUse
+      type: boolean
+    - description: If a new snapshot needs to be created, this contains the name of
+        the source PVC from which this snapshot was (or will be) created.
+      jsonPath: .spec.source.persistentVolumeClaimName
+      name: SourcePVC
+      type: string
+    - description: If a snapshot already exists, this contains the name of the existing
+        VolumeSnapshotContent object representing the existing snapshot.
+      jsonPath: .spec.source.volumeSnapshotContentName
+      name: SourceSnapshotContent
+      type: string
+    - description: Represents the minimum size of volume required to rehydrate from
+        this snapshot.
+      jsonPath: .status.restoreSize
+      name: RestoreSize
+      type: string
+    - description: The name of the VolumeSnapshotClass requested by the VolumeSnapshot.
+      jsonPath: .spec.volumeSnapshotClassName
+      name: SnapshotClass
+      type: string
+    - description: Name of the VolumeSnapshotContent object to which the VolumeSnapshot
+        object intends to bind to. Please note that verification of binding actually
+        requires checking both VolumeSnapshot and VolumeSnapshotContent to ensure
+        both are pointing at each other. Binding MUST be verified prior to usage of
+        this object.
+      jsonPath: .status.boundVolumeSnapshotContentName
+      name: SnapshotContent
+      type: string
+    - description: Timestamp when the point-in-time snapshot was taken by the underlying
+        storage system.
+      jsonPath: .status.creationTime
+      name: CreationTime
+      type: date
+    - jsonPath: .metadata.creationTimestamp
+      name: Age
+      type: date
+    name: v1
+    schema:
+      openAPIV3Schema:
+        description: VolumeSnapshot is a user's request for either creating a point-in-time
+          snapshot of a persistent volume, or binding to a pre-existing snapshot.
+        properties:
+          apiVersion:
+            description: 'APIVersion defines the versioned schema of this representation
+              of an object. Servers should convert recognized schemas to the latest
+              internal value, and may reject unrecognized values. More info: https://git.k8s.io/community/contributors/devel/sig-architecture/api-conventions.md#resources'
+            type: string
+          kind:
+            description: 'Kind is a string value representing the REST resource this
+              object represents. Servers may infer this from the endpoint the client
+              submits requests to. Cannot be updated. In CamelCase. More info: https://git.k8s.io/community/contributors/devel/sig-architecture/api-conventions.md#types-kinds'
+            type: string
+          spec:
+            description: 'spec defines the desired characteristics of a snapshot requested
+              by a user. More info: https://kubernetes.io/docs/concepts/storage/volume-snapshots#volumesnapshots
+              Required.'
+            properties:
+              source:
+                description: source specifies where a snapshot will be created from.
+                  This field is immutable after creation. Required.
+                properties:
+                  persistentVolumeClaimName:
+                    description: persistentVolumeClaimName specifies the name of the
+                      PersistentVolumeClaim object representing the volume from which
+                      a snapshot should be created. This PVC is assumed to be in the
+                      same namespace as the VolumeSnapshot object. This field should
+                      be set if the snapshot does not exists, and needs to be created.
+                      This field is immutable.
+                    type: string
+                  volumeSnapshotContentName:
+                    description: volumeSnapshotContentName specifies the name of a
+                      pre-existing VolumeSnapshotContent object representing an existing
+                      volume snapshot. This field should be set if the snapshot already
+                      exists and only needs a representation in Kubernetes. This field
+                      is immutable.
+                    type: string
+                type: object
+                oneOf:
+                - required: ["persistentVolumeClaimName"]
+                - required: ["volumeSnapshotContentName"]
+              volumeSnapshotClassName:
+                description: 'VolumeSnapshotClassName is the name of the VolumeSnapshotClass
+                  requested by the VolumeSnapshot. VolumeSnapshotClassName may be
+                  left nil to indicate that the default SnapshotClass should be used.
+                  A given cluster may have multiple default Volume SnapshotClasses:
+                  one default per CSI Driver. If a VolumeSnapshot does not specify
+                  a SnapshotClass, VolumeSnapshotSource will be checked to figure
+                  out what the associated CSI Driver is, and the default VolumeSnapshotClass
+                  associated with that CSI Driver will be used. If more than one VolumeSnapshotClass
+                  exist for a given CSI Driver and more than one have been marked
+                  as default, CreateSnapshot will fail and generate an event. Empty
+                  string is not allowed for this field.'
+                type: string
+            required:
+            - source
+            type: object
+          status:
+            description: status represents the current information of a snapshot.
+              Consumers must verify binding between VolumeSnapshot and VolumeSnapshotContent
+              objects is successful (by validating that both VolumeSnapshot and VolumeSnapshotContent
+              point at each other) before using this object.
+            properties:
+              boundVolumeSnapshotContentName:
+                description: 'boundVolumeSnapshotContentName is the name of the VolumeSnapshotContent
+                  object to which this VolumeSnapshot object intends to bind to. If
+                  not specified, it indicates that the VolumeSnapshot object has not
+                  been successfully bound to a VolumeSnapshotContent object yet. NOTE:
+                  To avoid possible security issues, consumers must verify binding
+                  between VolumeSnapshot and VolumeSnapshotContent objects is successful
+                  (by validating that both VolumeSnapshot and VolumeSnapshotContent
+                  point at each other) before using this object.'
+                type: string
+              creationTime:
+                description: creationTime is the timestamp when the point-in-time
+                  snapshot is taken by the underlying storage system. In dynamic snapshot
+                  creation case, this field will be filled in by the snapshot controller
+                  with the "creation_time" value returned from CSI "CreateSnapshot"
+                  gRPC call. For a pre-existing snapshot, this field will be filled
+                  with the "creation_time" value returned from the CSI "ListSnapshots"
+                  gRPC call if the driver supports it. If not specified, it may indicate
+                  that the creation time of the snapshot is unknown.
+                format: date-time
+                type: string
+              error:
+                description: error is the last observed error during snapshot creation,
+                  if any. This field could be helpful to upper level controllers(i.e.,
+                  application controller) to decide whether they should continue on
+                  waiting for the snapshot to be created based on the type of error
+                  reported. The snapshot controller will keep retrying when an error
+                  occurs during the snapshot creation. Upon success, this error field
+                  will be cleared.
+                properties:
+                  message:
+                    description: 'message is a string detailing the encountered error
+                      during snapshot creation if specified. NOTE: message may be
+                      logged, and it should not contain sensitive information.'
+                    type: string
+                  time:
+                    description: time is the timestamp when the error was encountered.
+                    format: date-time
+                    type: string
+                type: object
+              readyToUse:
+                description: readyToUse indicates if the snapshot is ready to be used
+                  to restore a volume. In dynamic snapshot creation case, this field
+                  will be filled in by the snapshot controller with the "ready_to_use"
+                  value returned from CSI "CreateSnapshot" gRPC call. For a pre-existing
+                  snapshot, this field will be filled with the "ready_to_use" value
+                  returned from the CSI "ListSnapshots" gRPC call if the driver supports
+                  it, otherwise, this field will be set to "True". If not specified,
+                  it means the readiness of a snapshot is unknown.
+                type: boolean
+              restoreSize:
+                type: string
+                description: restoreSize represents the minimum size of volume required
+                  to create a volume from this snapshot. In dynamic snapshot creation
+                  case, this field will be filled in by the snapshot controller with
+                  the "size_bytes" value returned from CSI "CreateSnapshot" gRPC call.
+                  For a pre-existing snapshot, this field will be filled with the
+                  "size_bytes" value returned from the CSI "ListSnapshots" gRPC call
+                  if the driver supports it. When restoring a volume from this snapshot,
+                  the size of the volume MUST NOT be smaller than the restoreSize
+                  if it is specified, otherwise the restoration will fail. If not
+                  specified, it indicates that the size is unknown.
+                pattern: ^(\+|-)?(([0-9]+(\.[0-9]*)?)|(\.[0-9]+))(([KMGTPE]i)|[numkMGTPE]|([eE](\+|-)?(([0-9]+(\.[0-9]*)?)|(\.[0-9]+))))?$
+                x-kubernetes-int-or-string: true
+            type: object
+        required:
+        - spec
+        type: object
+    served: true
+    storage: true
+    subresources:
+      status: {}
+  - additionalPrinterColumns:
+    - description: Indicates if the snapshot is ready to be used to restore a volume.
+      jsonPath: .status.readyToUse
+      name: ReadyToUse
+      type: boolean
+    - description: If a new snapshot needs to be created, this contains the name of the source PVC from which this snapshot was (or will be) created.
+      jsonPath: .spec.source.persistentVolumeClaimName
+      name: SourcePVC
+      type: string
+    - description: If a snapshot already exists, this contains the name of the existing VolumeSnapshotContent object representing the existing snapshot.
+      jsonPath: .spec.source.volumeSnapshotContentName
+      name: SourceSnapshotContent
+      type: string
+    - description: Represents the minimum size of volume required to rehydrate from this snapshot.
+      jsonPath: .status.restoreSize
+      name: RestoreSize
+      type: string
+    - description: The name of the VolumeSnapshotClass requested by the VolumeSnapshot.
+      jsonPath: .spec.volumeSnapshotClassName
+      name: SnapshotClass
+      type: string
+    - description: Name of the VolumeSnapshotContent object to which the VolumeSnapshot object intends to bind to. Please note that verification of binding actually requires checking both VolumeSnapshot and VolumeSnapshotContent to ensure both are pointing at each other. Binding MUST be verified prior to usage of this object.
+      jsonPath: .status.boundVolumeSnapshotContentName
+      name: SnapshotContent
+      type: string
+    - description: Timestamp when the point-in-time snapshot was taken by the underlying storage system.
+      jsonPath: .status.creationTime
+      name: CreationTime
+      type: date
+    - jsonPath: .metadata.creationTimestamp
+      name: Age
+      type: date
+    name: v1beta1
+    # This indicates the v1beta1 version of the custom resource is deprecated.
+    # API requests to this version receive a warning in the server response.
+    deprecated: true
+    # This overrides the default warning returned to clients making v1beta1 API requests.
+    deprecationWarning: "snapshot.storage.k8s.io/v1beta1 VolumeSnapshot is deprecated; use snapshot.storage.k8s.io/v1 VolumeSnapshot"
+    schema:
+      openAPIV3Schema:
+        description: VolumeSnapshot is a user's request for either creating a point-in-time snapshot of a persistent volume, or binding to a pre-existing snapshot.
+        properties:
+          apiVersion:
+            description: 'APIVersion defines the versioned schema of this representation of an object. Servers should convert recognized schemas to the latest internal value, and may reject unrecognized values. More info: https://git.k8s.io/community/contributors/devel/sig-architecture/api-conventions.md#resources'
+            type: string
+          kind:
+            description: 'Kind is a string value representing the REST resource this object represents. Servers may infer this from the endpoint the client submits requests to. Cannot be updated. In CamelCase. More info: https://git.k8s.io/community/contributors/devel/sig-architecture/api-conventions.md#types-kinds'
+            type: string
+          spec:
+            description: 'spec defines the desired characteristics of a snapshot requested by a user. More info: https://kubernetes.io/docs/concepts/storage/volume-snapshots#volumesnapshots Required.'
+            properties:
+              source:
+                description: source specifies where a snapshot will be created from. This field is immutable after creation. Required.
+                properties:
+                  persistentVolumeClaimName:
+                    description: persistentVolumeClaimName specifies the name of the PersistentVolumeClaim object representing the volume from which a snapshot should be created. This PVC is assumed to be in the same namespace as the VolumeSnapshot object. This field should be set if the snapshot does not exists, and needs to be created. This field is immutable.
+                    type: string
+                  volumeSnapshotContentName:
+                    description: volumeSnapshotContentName specifies the name of a pre-existing VolumeSnapshotContent object representing an existing volume snapshot. This field should be set if the snapshot already exists and only needs a representation in Kubernetes. This field is immutable.
+                    type: string
+                type: object
+              volumeSnapshotClassName:
+                description: 'VolumeSnapshotClassName is the name of the VolumeSnapshotClass requested by the VolumeSnapshot. VolumeSnapshotClassName may be left nil to indicate that the default SnapshotClass should be used. A given cluster may have multiple default Volume SnapshotClasses: one default per CSI Driver. If a VolumeSnapshot does not specify a SnapshotClass, VolumeSnapshotSource will be checked to figure out what the associated CSI Driver is, and the default VolumeSnapshotClass associated with that CSI Driver will be used. If more than one VolumeSnapshotClass exist for a given CSI Driver and more than one have been marked as default, CreateSnapshot will fail and generate an event. Empty string is not allowed for this field.'
+                type: string
+            required:
+            - source
+            type: object
+          status:
+            description: status represents the current information of a snapshot. Consumers must verify binding between VolumeSnapshot and VolumeSnapshotContent objects is successful (by validating that both VolumeSnapshot and VolumeSnapshotContent point at each other) before using this object.
+            properties:
+              boundVolumeSnapshotContentName:
+                description: 'boundVolumeSnapshotContentName is the name of the VolumeSnapshotContent object to which this VolumeSnapshot object intends to bind to. If not specified, it indicates that the VolumeSnapshot object has not been successfully bound to a VolumeSnapshotContent object yet. NOTE: To avoid possible security issues, consumers must verify binding between VolumeSnapshot and VolumeSnapshotContent objects is successful (by validating that both VolumeSnapshot and VolumeSnapshotContent point at each other) before using this object.'
+                type: string
+              creationTime:
+                description: creationTime is the timestamp when the point-in-time snapshot is taken by the underlying storage system. In dynamic snapshot creation case, this field will be filled in by the snapshot controller with the "creation_time" value returned from CSI "CreateSnapshot" gRPC call. For a pre-existing snapshot, this field will be filled with the "creation_time" value returned from the CSI "ListSnapshots" gRPC call if the driver supports it. If not specified, it may indicate that the creation time of the snapshot is unknown.
+                format: date-time
+                type: string
+              error:
+                description: error is the last observed error during snapshot creation, if any. This field could be helpful to upper level controllers(i.e., application controller) to decide whether they should continue on waiting for the snapshot to be created based on the type of error reported. The snapshot controller will keep retrying when an error occurs during the snapshot creation. Upon success, this error field will be cleared.
+                properties:
+                  message:
+                    description: 'message is a string detailing the encountered error during snapshot creation if specified. NOTE: message may be logged, and it should not contain sensitive information.'
+                    type: string
+                  time:
+                    description: time is the timestamp when the error was encountered.
+                    format: date-time
+                    type: string
+                type: object
+              readyToUse:
+                description: readyToUse indicates if the snapshot is ready to be used to restore a volume. In dynamic snapshot creation case, this field will be filled in by the snapshot controller with the "ready_to_use" value returned from CSI "CreateSnapshot" gRPC call. For a pre-existing snapshot, this field will be filled with the "ready_to_use" value returned from the CSI "ListSnapshots" gRPC call if the driver supports it, otherwise, this field will be set to "True". If not specified, it means the readiness of a snapshot is unknown.
+                type: boolean
+              restoreSize:
+                type: string
+                description: restoreSize represents the minimum size of volume required to create a volume from this snapshot. In dynamic snapshot creation case, this field will be filled in by the snapshot controller with the "size_bytes" value returned from CSI "CreateSnapshot" gRPC call. For a pre-existing snapshot, this field will be filled with the "size_bytes" value returned from the CSI "ListSnapshots" gRPC call if the driver supports it. When restoring a volume from this snapshot, the size of the volume MUST NOT be smaller than the restoreSize if it is specified, otherwise the restoration will fail. If not specified, it indicates that the size is unknown.
+                pattern: ^(\+|-)?(([0-9]+(\.[0-9]*)?)|(\.[0-9]+))(([KMGTPE]i)|[numkMGTPE]|([eE](\+|-)?(([0-9]+(\.[0-9]*)?)|(\.[0-9]+))))?$
+                x-kubernetes-int-or-string: true
+            type: object
+        required:
+        - spec
+        type: object
+    served: false
+    storage: false
+    subresources:
+      status: {}
+status:
+  acceptedNames:
+    kind: ""
+    plural: ""
+  conditions: []
+  storedVersions: []
+---
+apiVersion: apiextensions.k8s.io/v1
+kind: CustomResourceDefinition
+metadata:
+  annotations:
+    controller-gen.kubebuilder.io/version: v0.8.0
+    api-approved.kubernetes.io: "https://github.com/kubernetes-csi/external-snapshotter/pull/665"
+  creationTimestamp: null
+  name: volumesnapshotclasses.snapshot.storage.k8s.io
+spec:
+  group: snapshot.storage.k8s.io
+  names:
+    kind: VolumeSnapshotClass
+    listKind: VolumeSnapshotClassList
+    plural: volumesnapshotclasses
+    shortNames:
+    - vsclass
+    - vsclasses
+    singular: volumesnapshotclass
+  scope: Cluster
+  versions:
+  - additionalPrinterColumns:
+    - jsonPath: .driver
+      name: Driver
+      type: string
+    - description: Determines whether a VolumeSnapshotContent created through the
+        VolumeSnapshotClass should be deleted when its bound VolumeSnapshot is deleted.
+      jsonPath: .deletionPolicy
+      name: DeletionPolicy
+      type: string
+    - jsonPath: .metadata.creationTimestamp
+      name: Age
+      type: date
+    name: v1
+    schema:
+      openAPIV3Schema:
+        description: VolumeSnapshotClass specifies parameters that a underlying storage
+          system uses when creating a volume snapshot. A specific VolumeSnapshotClass
+          is used by specifying its name in a VolumeSnapshot object. VolumeSnapshotClasses
+          are non-namespaced
+        properties:
+          apiVersion:
+            description: 'APIVersion defines the versioned schema of this representation
+              of an object. Servers should convert recognized schemas to the latest
+              internal value, and may reject unrecognized values. More info: https://git.k8s.io/community/contributors/devel/sig-architecture/api-conventions.md#resources'
+            type: string
+          deletionPolicy:
+            description: deletionPolicy determines whether a VolumeSnapshotContent
+              created through the VolumeSnapshotClass should be deleted when its bound
+              VolumeSnapshot is deleted. Supported values are "Retain" and "Delete".
+              "Retain" means that the VolumeSnapshotContent and its physical snapshot
+              on underlying storage system are kept. "Delete" means that the VolumeSnapshotContent
+              and its physical snapshot on underlying storage system are deleted.
+              Required.
+            enum:
+            - Delete
+            - Retain
+            type: string
+          driver:
+            description: driver is the name of the storage driver that handles this
+              VolumeSnapshotClass. Required.
+            type: string
+          kind:
+            description: 'Kind is a string value representing the REST resource this
+              object represents. Servers may infer this from the endpoint the client
+              submits requests to. Cannot be updated. In CamelCase. More info: https://git.k8s.io/community/contributors/devel/sig-architecture/api-conventions.md#types-kinds'
+            type: string
+          parameters:
+            additionalProperties:
+              type: string
+            description: parameters is a key-value map with storage driver specific
+              parameters for creating snapshots. These values are opaque to Kubernetes.
+            type: object
+        required:
+        - deletionPolicy
+        - driver
+        type: object
+    served: true
+    storage: true
+    subresources: {}
+  - additionalPrinterColumns:
+    - jsonPath: .driver
+      name: Driver
+      type: string
+    - description: Determines whether a VolumeSnapshotContent created through the VolumeSnapshotClass should be deleted when its bound VolumeSnapshot is deleted.
+      jsonPath: .deletionPolicy
+      name: DeletionPolicy
+      type: string
+    - jsonPath: .metadata.creationTimestamp
+      name: Age
+      type: date
+    name: v1beta1
+    # This indicates the v1beta1 version of the custom resource is deprecated.
+    # API requests to this version receive a warning in the server response.
+    deprecated: true
+    # This overrides the default warning returned to clients making v1beta1 API requests.
+    deprecationWarning: "snapshot.storage.k8s.io/v1beta1 VolumeSnapshotClass is deprecated; use snapshot.storage.k8s.io/v1 VolumeSnapshotClass"
+    schema:
+      openAPIV3Schema:
+        description: VolumeSnapshotClass specifies parameters that a underlying storage system uses when creating a volume snapshot. A specific VolumeSnapshotClass is used by specifying its name in a VolumeSnapshot object. VolumeSnapshotClasses are non-namespaced
+        properties:
+          apiVersion:
+            description: 'APIVersion defines the versioned schema of this representation of an object. Servers should convert recognized schemas to the latest internal value, and may reject unrecognized values. More info: https://git.k8s.io/community/contributors/devel/sig-architecture/api-conventions.md#resources'
+            type: string
+          deletionPolicy:
+            description: deletionPolicy determines whether a VolumeSnapshotContent created through the VolumeSnapshotClass should be deleted when its bound VolumeSnapshot is deleted. Supported values are "Retain" and "Delete". "Retain" means that the VolumeSnapshotContent and its physical snapshot on underlying storage system are kept. "Delete" means that the VolumeSnapshotContent and its physical snapshot on underlying storage system are deleted. Required.
+            enum:
+            - Delete
+            - Retain
+            type: string
+          driver:
+            description: driver is the name of the storage driver that handles this VolumeSnapshotClass. Required.
+            type: string
+          kind:
+            description: 'Kind is a string value representing the REST resource this object represents. Servers may infer this from the endpoint the client submits requests to. Cannot be updated. In CamelCase. More info: https://git.k8s.io/community/contributors/devel/sig-architecture/api-conventions.md#types-kinds'
+            type: string
+          parameters:
+            additionalProperties:
+              type: string
+            description: parameters is a key-value map with storage driver specific parameters for creating snapshots. These values are opaque to Kubernetes.
+            type: object
+        required:
+        - deletionPolicy
+        - driver
+        type: object
+    served: false
+    storage: false
+    subresources: {}
+status:
+  acceptedNames:
+    kind: ""
+    plural: ""
+  conditions: []
+  storedVersions: []
+---
+apiVersion: apiextensions.k8s.io/v1
+kind: CustomResourceDefinition
+metadata:
+  annotations:
+    controller-gen.kubebuilder.io/version: v0.8.0
+    api-approved.kubernetes.io: "https://github.com/kubernetes-csi/external-snapshotter/pull/665"
+  creationTimestamp: null
+  name: volumesnapshotcontents.snapshot.storage.k8s.io
+spec:
+  group: snapshot.storage.k8s.io
+  names:
+    kind: VolumeSnapshotContent
+    listKind: VolumeSnapshotContentList
+    plural: volumesnapshotcontents
+    shortNames:
+    - vsc
+    - vscs
+    singular: volumesnapshotcontent
+  scope: Cluster
+  versions:
+  - additionalPrinterColumns:
+    - description: Indicates if the snapshot is ready to be used to restore a volume.
+      jsonPath: .status.readyToUse
+      name: ReadyToUse
+      type: boolean
+    - description: Represents the complete size of the snapshot in bytes
+      jsonPath: .status.restoreSize
+      name: RestoreSize
+      type: integer
+    - description: Determines whether this VolumeSnapshotContent and its physical
+        snapshot on the underlying storage system should be deleted when its bound
+        VolumeSnapshot is deleted.
+      jsonPath: .spec.deletionPolicy
+      name: DeletionPolicy
+      type: string
+    - description: Name of the CSI driver used to create the physical snapshot on
+        the underlying storage system.
+      jsonPath: .spec.driver
+      name: Driver
+      type: string
+    - description: Name of the VolumeSnapshotClass to which this snapshot belongs.
+      jsonPath: .spec.volumeSnapshotClassName
+      name: VolumeSnapshotClass
+      type: string
+    - description: Name of the VolumeSnapshot object to which this VolumeSnapshotContent
+        object is bound.
+      jsonPath: .spec.volumeSnapshotRef.name
+      name: VolumeSnapshot
+      type: string
+    - description: Namespace of the VolumeSnapshot object to which this VolumeSnapshotContent object is bound.
+      jsonPath: .spec.volumeSnapshotRef.namespace
+      name: VolumeSnapshotNamespace
+      type: string
+    - jsonPath: .metadata.creationTimestamp
+      name: Age
+      type: date
+    name: v1
+    schema:
+      openAPIV3Schema:
+        description: VolumeSnapshotContent represents the actual "on-disk" snapshot
+          object in the underlying storage system
+        properties:
+          apiVersion:
+            description: 'APIVersion defines the versioned schema of this representation
+              of an object. Servers should convert recognized schemas to the latest
+              internal value, and may reject unrecognized values. More info: https://git.k8s.io/community/contributors/devel/sig-architecture/api-conventions.md#resources'
+            type: string
+          kind:
+            description: 'Kind is a string value representing the REST resource this
+              object represents. Servers may infer this from the endpoint the client
+              submits requests to. Cannot be updated. In CamelCase. More info: https://git.k8s.io/community/contributors/devel/sig-architecture/api-conventions.md#types-kinds'
+            type: string
+          spec:
+            description: spec defines properties of a VolumeSnapshotContent created
+              by the underlying storage system. Required.
+            properties:
+              deletionPolicy:
+                description: deletionPolicy determines whether this VolumeSnapshotContent
+                  and its physical snapshot on the underlying storage system should
+                  be deleted when its bound VolumeSnapshot is deleted. Supported values
+                  are "Retain" and "Delete". "Retain" means that the VolumeSnapshotContent
+                  and its physical snapshot on underlying storage system are kept.
+                  "Delete" means that the VolumeSnapshotContent and its physical snapshot
+                  on underlying storage system are deleted. For dynamically provisioned
+                  snapshots, this field will automatically be filled in by the CSI
+                  snapshotter sidecar with the "DeletionPolicy" field defined in the
+                  corresponding VolumeSnapshotClass. For pre-existing snapshots, users
+                  MUST specify this field when creating the VolumeSnapshotContent
+                  object. Required.
+                enum:
+                - Delete
+                - Retain
+                type: string
+              driver:
+                description: driver is the name of the CSI driver used to create the
+                  physical snapshot on the underlying storage system. This MUST be
+                  the same as the name returned by the CSI GetPluginName() call for
+                  that driver. Required.
+                type: string
+              source:
+                description: source specifies whether the snapshot is (or should be)
+                  dynamically provisioned or already exists, and just requires a Kubernetes
+                  object representation. This field is immutable after creation. Required.
+                properties:
+                  snapshotHandle:
+                    description: snapshotHandle specifies the CSI "snapshot_id" of
+                      a pre-existing snapshot on the underlying storage system for
+                      which a Kubernetes object representation was (or should be)
+                      created. This field is immutable.
+                    type: string
+                  volumeHandle:
+                    description: volumeHandle specifies the CSI "volume_id" of the
+                      volume from which a snapshot should be dynamically taken from.
+                      This field is immutable.
+                    type: string
+                type: object
+                oneOf:
+                - required: ["snapshotHandle"]
+                - required: ["volumeHandle"]
+              sourceVolumeMode:
+                description: SourceVolumeMode is the mode of the volume whose snapshot
+                  is taken. Can be either “Filesystem” or “Block”. If not specified,
+                  it indicates the source volume's mode is unknown. This field is
+                  immutable. This field is an alpha field.
+                type: string
+              volumeSnapshotClassName:
+                description: name of the VolumeSnapshotClass from which this snapshot
+                  was (or will be) created. Note that after provisioning, the VolumeSnapshotClass
+                  may be deleted or recreated with different set of values, and as
+                  such, should not be referenced post-snapshot creation.
+                type: string
+              volumeSnapshotRef:
+                description: volumeSnapshotRef specifies the VolumeSnapshot object
+                  to which this VolumeSnapshotContent object is bound. VolumeSnapshot.Spec.VolumeSnapshotContentName
+                  field must reference to this VolumeSnapshotContent's name for the
+                  bidirectional binding to be valid. For a pre-existing VolumeSnapshotContent
+                  object, name and namespace of the VolumeSnapshot object MUST be
+                  provided for binding to happen. This field is immutable after creation.
+                  Required.
+                properties:
+                  apiVersion:
+                    description: API version of the referent.
+                    type: string
+                  fieldPath:
+                    description: 'If referring to a piece of an object instead of
+                      an entire object, this string should contain a valid JSON/Go
+                      field access statement, such as desiredState.manifest.containers[2].
+                      For example, if the object reference is to a container within
+                      a pod, this would take on a value like: "spec.containers{name}"
+                      (where "name" refers to the name of the container that triggered
+                      the event) or if no container name is specified "spec.containers[2]"
+                      (container with index 2 in this pod). This syntax is chosen
+                      only to have some well-defined way of referencing a part of
+                      an object. TODO: this design is not final and this field is
+                      subject to change in the future.'
+                    type: string
+                  kind:
+                    description: 'Kind of the referent. More info: https://git.k8s.io/community/contributors/devel/sig-architecture/api-conventions.md#types-kinds'
+                    type: string
+                  name:
+                    description: 'Name of the referent. More info: https://kubernetes.io/docs/concepts/overview/working-with-objects/names/#names'
+                    type: string
+                  namespace:
+                    description: 'Namespace of the referent. More info: https://kubernetes.io/docs/concepts/overview/working-with-objects/namespaces/'
+                    type: string
+                  resourceVersion:
+                    description: 'Specific resourceVersion to which this reference
+                      is made, if any. More info: https://git.k8s.io/community/contributors/devel/sig-architecture/api-conventions.md#concurrency-control-and-consistency'
+                    type: string
+                  uid:
+                    description: 'UID of the referent. More info: https://kubernetes.io/docs/concepts/overview/working-with-objects/names/#uids'
+                    type: string
+                type: object
+            required:
+            - deletionPolicy
+            - driver
+            - source
+            - volumeSnapshotRef
+            type: object
+          status:
+            description: status represents the current information of a snapshot.
+            properties:
+              creationTime:
+                description: creationTime is the timestamp when the point-in-time
+                  snapshot is taken by the underlying storage system. In dynamic snapshot
+                  creation case, this field will be filled in by the CSI snapshotter
+                  sidecar with the "creation_time" value returned from CSI "CreateSnapshot"
+                  gRPC call. For a pre-existing snapshot, this field will be filled
+                  with the "creation_time" value returned from the CSI "ListSnapshots"
+                  gRPC call if the driver supports it. If not specified, it indicates
+                  the creation time is unknown. The format of this field is a Unix
+                  nanoseconds time encoded as an int64. On Unix, the command `date
+                  +%s%N` returns the current time in nanoseconds since 1970-01-01
+                  00:00:00 UTC.
+                format: int64
+                type: integer
+              error:
+                description: error is the last observed error during snapshot creation,
+                  if any. Upon success after retry, this error field will be cleared.
+                properties:
+                  message:
+                    description: 'message is a string detailing the encountered error
+                      during snapshot creation if specified. NOTE: message may be
+                      logged, and it should not contain sensitive information.'
+                    type: string
+                  time:
+                    description: time is the timestamp when the error was encountered.
+                    format: date-time
+                    type: string
+                type: object
+              readyToUse:
+                description: readyToUse indicates if a snapshot is ready to be used
+                  to restore a volume. In dynamic snapshot creation case, this field
+                  will be filled in by the CSI snapshotter sidecar with the "ready_to_use"
+                  value returned from CSI "CreateSnapshot" gRPC call. For a pre-existing
+                  snapshot, this field will be filled with the "ready_to_use" value
+                  returned from the CSI "ListSnapshots" gRPC call if the driver supports
+                  it, otherwise, this field will be set to "True". If not specified,
+                  it means the readiness of a snapshot is unknown.
+                type: boolean
+              restoreSize:
+                description: restoreSize represents the complete size of the snapshot
+                  in bytes. In dynamic snapshot creation case, this field will be
+                  filled in by the CSI snapshotter sidecar with the "size_bytes" value
+                  returned from CSI "CreateSnapshot" gRPC call. For a pre-existing
+                  snapshot, this field will be filled with the "size_bytes" value
+                  returned from the CSI "ListSnapshots" gRPC call if the driver supports
+                  it. When restoring a volume from this snapshot, the size of the
+                  volume MUST NOT be smaller than the restoreSize if it is specified,
+                  otherwise the restoration will fail. If not specified, it indicates
+                  that the size is unknown.
+                format: int64
+                minimum: 0
+                type: integer
+              snapshotHandle:
+                description: snapshotHandle is the CSI "snapshot_id" of a snapshot
+                  on the underlying storage system. If not specified, it indicates
+                  that dynamic snapshot creation has either failed or it is still
+                  in progress.
+                type: string
+            type: object
+        required:
+        - spec
+        type: object
+    served: true
+    storage: true
+    subresources:
+      status: {}
+  - additionalPrinterColumns:
+    - description: Indicates if the snapshot is ready to be used to restore a volume.
+      jsonPath: .status.readyToUse
+      name: ReadyToUse
+      type: boolean
+    - description: Represents the complete size of the snapshot in bytes
+      jsonPath: .status.restoreSize
+      name: RestoreSize
+      type: integer
+    - description: Determines whether this VolumeSnapshotContent and its physical snapshot on the underlying storage system should be deleted when its bound VolumeSnapshot is deleted.
+      jsonPath: .spec.deletionPolicy
+      name: DeletionPolicy
+      type: string
+    - description: Name of the CSI driver used to create the physical snapshot on the underlying storage system.
+      jsonPath: .spec.driver
+      name: Driver
+      type: string
+    - description: Name of the VolumeSnapshotClass to which this snapshot belongs.
+      jsonPath: .spec.volumeSnapshotClassName
+      name: VolumeSnapshotClass
+      type: string
+    - description: Name of the VolumeSnapshot object to which this VolumeSnapshotContent object is bound.
+      jsonPath: .spec.volumeSnapshotRef.name
+      name: VolumeSnapshot
+      type: string
+    - description: Namespace of the VolumeSnapshot object to which this VolumeSnapshotContent object is bound.
+      jsonPath: .spec.volumeSnapshotRef.namespace
+      name: VolumeSnapshotNamespace
+      type: string
+    - jsonPath: .metadata.creationTimestamp
+      name: Age
+      type: date
+    name: v1beta1
+    # This indicates the v1beta1 version of the custom resource is deprecated.
+    # API requests to this version receive a warning in the server response.
+    deprecated: true
+    # This overrides the default warning returned to clients making v1beta1 API requests.
+    deprecationWarning: "snapshot.storage.k8s.io/v1beta1 VolumeSnapshotContent is deprecated; use snapshot.storage.k8s.io/v1 VolumeSnapshotContent"
+    schema:
+      openAPIV3Schema:
+        description: VolumeSnapshotContent represents the actual "on-disk" snapshot object in the underlying storage system
+        properties:
+          apiVersion:
+            description: 'APIVersion defines the versioned schema of this representation of an object. Servers should convert recognized schemas to the latest internal value, and may reject unrecognized values. More info: https://git.k8s.io/community/contributors/devel/sig-architecture/api-conventions.md#resources'
+            type: string
+          kind:
+            description: 'Kind is a string value representing the REST resource this object represents. Servers may infer this from the endpoint the client submits requests to. Cannot be updated. In CamelCase. More info: https://git.k8s.io/community/contributors/devel/sig-architecture/api-conventions.md#types-kinds'
+            type: string
+          spec:
+            description: spec defines properties of a VolumeSnapshotContent created by the underlying storage system. Required.
+            properties:
+              deletionPolicy:
+                description: deletionPolicy determines whether this VolumeSnapshotContent and its physical snapshot on the underlying storage system should be deleted when its bound VolumeSnapshot is deleted. Supported values are "Retain" and "Delete". "Retain" means that the VolumeSnapshotContent and its physical snapshot on underlying storage system are kept. "Delete" means that the VolumeSnapshotContent and its physical snapshot on underlying storage system are deleted. For dynamically provisioned snapshots, this field will automatically be filled in by the CSI snapshotter sidecar with the "DeletionPolicy" field defined in the corresponding VolumeSnapshotClass. For pre-existing snapshots, users MUST specify this field when creating the  VolumeSnapshotContent object. Required.
+                enum:
+                - Delete
+                - Retain
+                type: string
+              driver:
+                description: driver is the name of the CSI driver used to create the physical snapshot on the underlying storage system. This MUST be the same as the name returned by the CSI GetPluginName() call for that driver. Required.
+                type: string
+              source:
+                description: source specifies whether the snapshot is (or should be) dynamically provisioned or already exists, and just requires a Kubernetes object representation. This field is immutable after creation. Required.
+                properties:
+                  snapshotHandle:
+                    description: snapshotHandle specifies the CSI "snapshot_id" of a pre-existing snapshot on the underlying storage system for which a Kubernetes object representation was (or should be) created. This field is immutable.
+                    type: string
+                  volumeHandle:
+                    description: volumeHandle specifies the CSI "volume_id" of the volume from which a snapshot should be dynamically taken from. This field is immutable.
+                    type: string
+                type: object
+              volumeSnapshotClassName:
+                description: name of the VolumeSnapshotClass from which this snapshot was (or will be) created. Note that after provisioning, the VolumeSnapshotClass may be deleted or recreated with different set of values, and as such, should not be referenced post-snapshot creation.
+                type: string
+              volumeSnapshotRef:
+                description: volumeSnapshotRef specifies the VolumeSnapshot object to which this VolumeSnapshotContent object is bound. VolumeSnapshot.Spec.VolumeSnapshotContentName field must reference to this VolumeSnapshotContent's name for the bidirectional binding to be valid. For a pre-existing VolumeSnapshotContent object, name and namespace of the VolumeSnapshot object MUST be provided for binding to happen. This field is immutable after creation. Required.
+                properties:
+                  apiVersion:
+                    description: API version of the referent.
+                    type: string
+                  fieldPath:
+                    description: 'If referring to a piece of an object instead of an entire object, this string should contain a valid JSON/Go field access statement, such as desiredState.manifest.containers[2]. For example, if the object reference is to a container within a pod, this would take on a value like: "spec.containers{name}" (where "name" refers to the name of the container that triggered the event) or if no container name is specified "spec.containers[2]" (container with index 2 in this pod). This syntax is chosen only to have some well-defined way of referencing a part of an object. TODO: this design is not final and this field is subject to change in the future.'
+                    type: string
+                  kind:
+                    description: 'Kind of the referent. More info: https://git.k8s.io/community/contributors/devel/sig-architecture/api-conventions.md#types-kinds'
+                    type: string
+                  name:
+                    description: 'Name of the referent. More info: https://kubernetes.io/docs/concepts/overview/working-with-objects/names/#names'
+                    type: string
+                  namespace:
+                    description: 'Namespace of the referent. More info: https://kubernetes.io/docs/concepts/overview/working-with-objects/namespaces/'
+                    type: string
+                  resourceVersion:
+                    description: 'Specific resourceVersion to which this reference is made, if any. More info: https://git.k8s.io/community/contributors/devel/sig-architecture/api-conventions.md#concurrency-control-and-consistency'
+                    type: string
+                  uid:
+                    description: 'UID of the referent. More info: https://kubernetes.io/docs/concepts/overview/working-with-objects/names/#uids'
+                    type: string
+                type: object
+            required:
+            - deletionPolicy
+            - driver
+            - source
+            - volumeSnapshotRef
+            type: object
+          status:
+            description: status represents the current information of a snapshot.
+            properties:
+              creationTime:
+                description: creationTime is the timestamp when the point-in-time snapshot is taken by the underlying storage system. In dynamic snapshot creation case, this field will be filled in by the CSI snapshotter sidecar with the "creation_time" value returned from CSI "CreateSnapshot" gRPC call. For a pre-existing snapshot, this field will be filled with the "creation_time" value returned from the CSI "ListSnapshots" gRPC call if the driver supports it. If not specified, it indicates the creation time is unknown. The format of this field is a Unix nanoseconds time encoded as an int64. On Unix, the command `date +%s%N` returns the current time in nanoseconds since 1970-01-01 00:00:00 UTC.
+                format: int64
+                type: integer
+              error:
+                description: error is the last observed error during snapshot creation, if any. Upon success after retry, this error field will be cleared.
+                properties:
+                  message:
+                    description: 'message is a string detailing the encountered error during snapshot creation if specified. NOTE: message may be logged, and it should not contain sensitive information.'
+                    type: string
+                  time:
+                    description: time is the timestamp when the error was encountered.
+                    format: date-time
+                    type: string
+                type: object
+              readyToUse:
+                description: readyToUse indicates if a snapshot is ready to be used to restore a volume. In dynamic snapshot creation case, this field will be filled in by the CSI snapshotter sidecar with the "ready_to_use" value returned from CSI "CreateSnapshot" gRPC call. For a pre-existing snapshot, this field will be filled with the "ready_to_use" value returned from the CSI "ListSnapshots" gRPC call if the driver supports it, otherwise, this field will be set to "True". If not specified, it means the readiness of a snapshot is unknown.
+                type: boolean
+              restoreSize:
+                description: restoreSize represents the complete size of the snapshot in bytes. In dynamic snapshot creation case, this field will be filled in by the CSI snapshotter sidecar with the "size_bytes" value returned from CSI "CreateSnapshot" gRPC call. For a pre-existing snapshot, this field will be filled with the "size_bytes" value returned from the CSI "ListSnapshots" gRPC call if the driver supports it. When restoring a volume from this snapshot, the size of the volume MUST NOT be smaller than the restoreSize if it is specified, otherwise the restoration will fail. If not specified, it indicates that the size is unknown.
+                format: int64
+                minimum: 0
+                type: integer
+              snapshotHandle:
+                description: snapshotHandle is the CSI "snapshot_id" of a snapshot on the underlying storage system. If not specified, it indicates that dynamic snapshot creation has either failed or it is still in progress.
+                type: string
+            type: object
+        required:
+        - spec
+        type: object
+    served: false
+    storage: false
+    subresources:
+      status: {}
+status:
+  acceptedNames:
+    kind: ""
+    plural: ""
+  conditions: []
+  storedVersions: []
+{{- end -}}
diff --git a/charts/v1.31.2/azuredisk-csi-driver/templates/csi-azuredisk-controller.yaml b/charts/v1.31.2/azuredisk-csi-driver/templates/csi-azuredisk-controller.yaml
new file mode 100644
index 0000000000..af81f49b77
--- /dev/null
+++ b/charts/v1.31.2/azuredisk-csi-driver/templates/csi-azuredisk-controller.yaml
@@ -0,0 +1,346 @@
+kind: Deployment
+apiVersion: apps/v1
+metadata:
+  name: {{ .Values.controller.name }}
+  namespace: {{ .Release.Namespace }}
+{{ include "azuredisk.labels" . | indent 2 }}
+{{- with .Values.controller.labels }}
+{{ . | toYaml | indent 4 }}
+{{- end }}
+{{- with .Values.controller.annotations }}
+  annotations:
+{{ . | toYaml | indent 4 }}
+{{- end }}
+spec:
+  replicas: {{ .Values.controller.replicas }}
+  selector:
+    matchLabels:
+      app: {{ .Values.controller.name }}
+  template:
+    metadata:
+{{ include "azuredisk.labels" . | indent 6 }}
+        app: {{ .Values.controller.name }}
+        {{- if .Values.workloadIdentity.clientID }}
+        azure.workload.identity/use: "true"
+        {{- end }}
+{{- with .Values.controller.podLabels }}
+{{ toYaml . | indent 8 }}
+{{- end }}
+{{- with .Values.controller.podAnnotations }}
+      annotations:
+{{ toYaml . | indent 8 }}
+{{- end }}
+    spec:
+      {{- if .Values.imagePullSecrets }}
+      imagePullSecrets:
+{{ toYaml .Values.imagePullSecrets | indent 8 }}
+      {{- end }}
+      hostNetwork: {{ .Values.controller.hostNetwork }}
+      serviceAccountName: {{ .Values.serviceAccount.controller }}
+      nodeSelector:
+        kubernetes.io/os: linux
+{{- with .Values.controller.nodeSelector }}
+{{ toYaml . | indent 8 }}
+{{- end }}
+    # runOnControlPlane=true or runOnMaster=true only takes effect if affinity is not set
+    {{- if contains (tpl "{{ .Values.controller.affinity }}" .) "nodeSelectorTerms" }}
+      {{- with .Values.controller.affinity }}
+      affinity:
+      {{ toYaml . | indent 8 }}
+      {{- end }}
+    {{- else if or .Values.controller.runOnControlPlane .Values.controller.runOnMaster}}
+      affinity:
+        nodeAffinity:
+          requiredDuringSchedulingIgnoredDuringExecution:
+            nodeSelectorTerms:
+              - matchExpressions:
+                {{- if .Values.controller.runOnControlPlane}}
+                - key: node-role.kubernetes.io/control-plane
+                  operator: Exists
+                {{- end}}
+                {{- if .Values.controller.runOnMaster}}
+                - key: node-role.kubernetes.io/master
+                  operator: Exists
+                {{- end}}
+    {{- end }}
+      priorityClassName: system-cluster-critical
+      securityContext:
+        seccompProfile:
+          type: RuntimeDefault
+{{- with .Values.controller.tolerations }}
+      tolerations:
+{{ toYaml . | indent 8 }}
+{{- end }}
+      {{- include "azuredisk.pullSecrets" . | indent 6 }}
+      containers:
+        - name: csi-provisioner
+{{- if hasPrefix "/" .Values.image.csiProvisioner.repository }}
+          image: "{{ .Values.image.baseRepo }}{{ .Values.image.csiProvisioner.repository }}:{{ .Values.image.csiProvisioner.tag }}"
+{{- else }}
+          image: "{{ .Values.image.csiProvisioner.repository }}:{{ .Values.image.csiProvisioner.tag }}"
+{{- end }}
+          args:
+            - "--feature-gates=Topology=true,HonorPVReclaimPolicy=true"
+            - "--csi-address=$(ADDRESS)"
+            - "--v=2"
+            - "--timeout=30s"
+            - "--leader-election"
+            - "--leader-election-namespace={{ .Release.Namespace }}"
+            - "--worker-threads={{ .Values.controller.provisionerWorkerThreads }}"
+            - "--extra-create-metadata=true"
+            - "--strict-topology=true"
+            - "--kube-api-qps=50"
+            - "--kube-api-burst=100"
+            - "--retry-interval-max=30m"
+          env:
+            - name: ADDRESS
+              value: /csi/csi.sock
+          volumeMounts:
+            - mountPath: /csi
+              name: socket-dir
+          resources: {{- toYaml .Values.controller.resources.csiProvisioner | nindent 12 }}
+          securityContext:
+            capabilities:
+              drop:
+              - ALL
+        - name: csi-attacher
+{{- if hasPrefix "/" .Values.image.csiAttacher.repository }}
+          image: "{{ .Values.image.baseRepo }}{{ .Values.image.csiAttacher.repository }}:{{ .Values.image.csiAttacher.tag }}"
+{{- else }}
+          image: "{{ .Values.image.csiAttacher.repository }}:{{ .Values.image.csiAttacher.tag }}"
+{{- end }}
+          args:
+            - "-v=2"
+            - "-csi-address=$(ADDRESS)"
+            - "-timeout=1200s"
+            - "-leader-election"
+            - "--leader-election-namespace={{ .Release.Namespace }}"
+            - "-worker-threads={{ .Values.controller.attacherWorkerThreads }}"
+            - "-kube-api-qps=200"
+            - "-kube-api-burst=400"
+          env:
+            - name: ADDRESS
+              value: /csi/csi.sock
+          volumeMounts:
+          - mountPath: /csi
+            name: socket-dir
+          resources: {{- toYaml .Values.controller.resources.csiAttacher | nindent 12 }}
+          securityContext:
+            capabilities:
+              drop:
+              - ALL
+        - name: csi-snapshotter
+{{- if hasPrefix "/" .Values.snapshot.image.csiSnapshotter.repository }}
+          image: "{{ .Values.image.baseRepo }}{{ .Values.snapshot.image.csiSnapshotter.repository }}:{{ .Values.snapshot.image.csiSnapshotter.tag }}"
+{{- else }}
+          image: "{{ .Values.snapshot.image.csiSnapshotter.repository }}:{{ .Values.snapshot.image.csiSnapshotter.tag }}"
+{{- end }}
+          args:
+            - "-csi-address=$(ADDRESS)"
+            - "-leader-election"
+            - "--leader-election-namespace={{ .Release.Namespace }}"
+            - "-v=2"
+            - "--timeout=1200s"
+            - "--extra-create-metadata=true"
+            - "--retry-interval-max=30m"
+          env:
+            - name: ADDRESS
+              value: /csi/csi.sock
+          volumeMounts:
+            - name: socket-dir
+              mountPath: /csi
+          resources: {{- toYaml .Values.controller.resources.csiSnapshotter | nindent 12 }}
+          securityContext:
+            capabilities:
+              drop:
+              - ALL
+        - name: csi-resizer
+{{- if hasPrefix "/" .Values.image.csiResizer.repository }}
+          image: "{{ .Values.image.baseRepo }}{{ .Values.image.csiResizer.repository }}:{{ .Values.image.csiResizer.tag }}"
+{{- else }}
+          image: "{{ .Values.image.csiResizer.repository }}:{{ .Values.image.csiResizer.tag }}"
+{{- end }}
+          args:
+            - "-csi-address=$(ADDRESS)"
+            - "-v=2"
+            - "-leader-election"
+            - "--leader-election-namespace={{ .Release.Namespace }}"
+            - '-handle-volume-inuse-error=false'
+            - '-feature-gates=RecoverVolumeExpansionFailure=true'
+            - "-timeout=240s"
+            - "--retry-interval-max=30m"
+          env:
+            - name: ADDRESS
+              value: /csi/csi.sock
+          volumeMounts:
+            - name: socket-dir
+              mountPath: /csi
+          resources: {{- toYaml .Values.controller.resources.csiResizer | nindent 12 }}
+          securityContext:
+            capabilities:
+              drop:
+              - ALL
+        - name: liveness-probe
+{{- if hasPrefix "/" .Values.image.livenessProbe.repository }}
+          image: "{{ .Values.image.baseRepo }}{{ .Values.image.livenessProbe.repository }}:{{ .Values.image.livenessProbe.tag }}"
+{{- else }}
+          image: "{{ .Values.image.livenessProbe.repository }}:{{ .Values.image.livenessProbe.tag }}"
+{{- end }}
+          args:
+            - --csi-address=/csi/csi.sock
+            - --probe-timeout=3s
+{{- if eq .Values.controller.hostNetwork true }}
+            - --http-endpoint=localhost:{{ .Values.controller.livenessProbe.healthPort }}
+{{- else }}
+            - --health-port={{ .Values.controller.livenessProbe.healthPort }}
+{{- end }}
+            - --v=2
+          volumeMounts:
+            - name: socket-dir
+              mountPath: /csi
+          resources: {{- toYaml .Values.controller.resources.livenessProbe | nindent 12 }}
+          securityContext:
+            capabilities:
+              drop:
+              - ALL
+{{- if eq .Values.controller.enableTrafficManager true }}
+        - image: mcr.microsoft.com/aks/ccp/ccp-auto-thrust:master.221118.2
+          imagePullPolicy: IfNotPresent
+          name: proxy
+          command:
+            - /ccp-auto-thrust
+          args:
+            - "--port={{ .Values.controller.trafficManagerPort }}"
+          ports:
+          - containerPort: {{ .Values.controller.trafficManagerPort }}
+            protocol: TCP
+          securityContext:
+            capabilities:
+              drop:
+              - ALL
+{{- end }}
+        - name: azuredisk
+{{- if hasPrefix "/" .Values.image.azuredisk.repository }}
+          image: "{{ .Values.image.baseRepo }}{{ .Values.image.azuredisk.repository }}:{{ .Values.image.azuredisk.tag }}"
+{{- else }}
+          image: "{{ .Values.image.azuredisk.repository }}:{{ .Values.image.azuredisk.tag }}"
+{{- end }}
+          args:
+            - "--v={{ .Values.controller.logLevel }}"
+            - "--endpoint=$(CSI_ENDPOINT)"
+            - "--metrics-address=0.0.0.0:{{ .Values.controller.metricsPort }}"
+            - "--disable-avset-nodes={{ .Values.controller.disableAvailabilitySetNodes }}"
+            - "--vm-type={{ .Values.controller.vmType }}"
+            - "--drivername={{ .Values.driver.name }}"
+            - "--cloud-config-secret-name={{ .Values.controller.cloudConfigSecretName }}"
+            - "--cloud-config-secret-namespace={{ .Values.controller.cloudConfigSecretNamespace }}"
+            - "--custom-user-agent={{ .Values.driver.customUserAgent }}"
+            - "--user-agent-suffix={{ .Values.driver.userAgentSuffix }}"
+            - "--allow-empty-cloud-config={{ .Values.controller.allowEmptyCloudConfig }}"
+            - "--vmss-cache-ttl-seconds={{ .Values.controller.vmssCacheTTLInSeconds }}"
+            - "--enable-traffic-manager={{ .Values.controller.enableTrafficManager }}"
+            - "--traffic-manager-port={{ .Values.controller.trafficManagerPort }}"
+            - "--enable-otel-tracing={{ .Values.controller.otelTracing.enabled }}"
+            - "--check-disk-lun-collision=true"
+            {{- range $value := .Values.controller.extraArgs }}
+            - {{ $value | quote }}
+            {{- end }}
+          ports:
+            - containerPort: {{ .Values.controller.metricsPort }}
+              name: metrics
+              protocol: TCP
+{{- if ne .Values.controller.hostNetwork true }}
+            - containerPort: {{ .Values.controller.livenessProbe.healthPort }}
+              name: healthz
+              protocol: TCP
+{{- end }}
+          livenessProbe:
+            failureThreshold: 5
+            httpGet:
+              path: /healthz
+{{- if eq .Values.controller.hostNetwork true }}
+              host: localhost
+              port: {{ .Values.controller.livenessProbe.healthPort }}
+{{- else }}
+              port: healthz
+{{- end }}
+            initialDelaySeconds: 30
+            timeoutSeconds: 10
+            periodSeconds: 30
+          env:
+            - name: AZURE_CREDENTIAL_FILE
+              valueFrom:
+                configMapKeyRef:
+                  name: {{ .Values.azureCredentialFileConfigMap }}
+                  key: path
+                  optional: true
+            - name: CSI_ENDPOINT
+              value: unix:///csi/csi.sock
+            {{- if ne .Values.driver.httpsProxy "" }}
+            - name: HTTPS_PROXY
+              value: {{ .Values.driver.httpsProxy }}
+            {{- end }}
+            {{- if ne .Values.driver.httpProxy "" }}
+            - name: HTTP_PROXY
+              value: {{ .Values.driver.httpProxy }}
+            {{- end }}
+            {{- if ne .Values.driver.noProxy "" }}
+            - name: NO_PROXY
+              value: {{ .Values.driver.noProxy }}
+            {{- end }}
+            - name: AZURE_GO_SDK_LOG_LEVEL
+              value: {{ .Values.driver.azureGoSDKLogLevel }}
+            {{- if eq .Values.cloud "AzureStackCloud" }}
+            - name: AZURE_ENVIRONMENT_FILEPATH
+              value: /etc/kubernetes/azurestackcloud.json
+            {{- end }}
+            {{- if .Values.controller.otelTracing.enabled }}
+            - name: OTEL_SERVICE_NAME
+              value: {{ .Values.controller.otelTracing.otelServiceName }}
+            - name: OTEL_EXPORTER_OTLP_ENDPOINT
+              value: {{ .Values.controller.otelTracing.otelExporterEndpoint }}
+            {{- end }}
+          imagePullPolicy: {{ .Values.image.azuredisk.pullPolicy }}
+          volumeMounts:
+            - mountPath: /csi
+              name: socket-dir
+            - mountPath: /etc/kubernetes/
+              name: azure-cred
+            {{- if and (eq .Values.cloud "AzureStackCloud") (ne .Values.linux.distro "fedora") }}
+            - name: ssl
+              mountPath: /etc/ssl/certs
+              readOnly: true
+            {{- end }}
+            {{- if eq .Values.linux.distro "fedora" }}
+            - name: ssl
+              mountPath: /etc/ssl/certs
+              readOnly: true
+            - name: ssl-pki
+              mountPath: /etc/pki/ca-trust/extracted
+              readOnly: true
+            {{- end }}
+          resources: {{- toYaml .Values.controller.resources.azuredisk | nindent 12 }}
+          securityContext:
+            capabilities:
+              drop:
+              - ALL
+      volumes:
+        - name: socket-dir
+          emptyDir: {}
+        - name: azure-cred
+          hostPath:
+            path: /etc/kubernetes/
+            type: DirectoryOrCreate
+        {{- if and (eq .Values.cloud "AzureStackCloud") (ne .Values.linux.distro "fedora") }}
+        - name: ssl
+          hostPath:
+            path: /etc/ssl/certs
+        {{- end }}
+        {{- if eq .Values.linux.distro "fedora" }}
+        - name: ssl
+          hostPath:
+            path: /etc/ssl/certs
+        - name: ssl-pki
+          hostPath:
+            path: /etc/pki/ca-trust/extracted
+        {{- end }}
diff --git a/charts/v1.31.2/azuredisk-csi-driver/templates/csi-azuredisk-driver.yaml b/charts/v1.31.2/azuredisk-csi-driver/templates/csi-azuredisk-driver.yaml
new file mode 100644
index 0000000000..21f941748e
--- /dev/null
+++ b/charts/v1.31.2/azuredisk-csi-driver/templates/csi-azuredisk-driver.yaml
@@ -0,0 +1,13 @@
+apiVersion: storage.k8s.io/v1
+kind: CSIDriver
+metadata:
+  name: {{ .Values.driver.name }}
+  annotations:
+    csiDriver: "{{ .Values.image.azuredisk.tag }}"
+    snapshot: "{{ .Values.snapshot.image.csiSnapshotter.tag }}"
+spec:
+  attachRequired: true
+  podInfoOnMount: false
+  {{- if .Values.feature.enableFSGroupPolicy}}
+  fsGroupPolicy: File
+  {{- end}}
diff --git a/charts/v1.31.2/azuredisk-csi-driver/templates/csi-azuredisk-node-windows-hostprocess.yaml b/charts/v1.31.2/azuredisk-csi-driver/templates/csi-azuredisk-node-windows-hostprocess.yaml
new file mode 100644
index 0000000000..fe7be5ba4c
--- /dev/null
+++ b/charts/v1.31.2/azuredisk-csi-driver/templates/csi-azuredisk-node-windows-hostprocess.yaml
@@ -0,0 +1,174 @@
+{{- if and (.Values.windows.enabled) (eq .Values.windows.useHostProcessContainers true) }}
+kind: DaemonSet
+apiVersion: apps/v1
+metadata:
+  name: {{ .Values.windows.dsName }}
+  namespace: {{ .Release.Namespace }}
+{{ include "azuredisk.labels" . | indent 2 }}
+{{- with .Values.windows.labels }}
+{{ . | toYaml | indent 4 }}
+{{- end }}
+{{- with .Values.windows.annotations }}
+  annotations:
+{{ . | toYaml | indent 4 }}
+{{- end }}
+spec:
+  updateStrategy:
+    rollingUpdate:
+      maxUnavailable: {{ .Values.node.maxUnavailable }}
+    type: RollingUpdate
+  selector:
+    matchLabels:
+      app: {{ .Values.windows.dsName }}
+  template:
+    metadata:
+{{ include "azuredisk.labels" . | indent 6 }}
+        app: {{ .Values.windows.dsName }}
+{{- with .Values.windows.podLabels }}
+{{ toYaml . | indent 8 }}
+{{- end }}
+{{- with .Values.windows.podAnnotations }}
+      annotations:
+{{ toYaml . | indent 8 }}
+{{- end }}
+    spec:
+      serviceAccountName: {{ .Values.serviceAccount.node }}
+{{- with .Values.windows.tolerations }}
+      tolerations:
+{{ toYaml . | indent 8 }}
+{{- end }}
+      nodeSelector:
+        kubernetes.io/os: windows
+{{- with .Values.windows.nodeSelector }}
+{{ toYaml . | indent 8 }}
+{{- end }}
+      affinity:
+{{- with .Values.windows.affinity }}
+{{ toYaml . | indent 8 }}
+{{- end }}
+        nodeAffinity:
+{{ toYaml .Values.windows.nodeAffinity | indent 10 }}
+      priorityClassName: system-node-critical
+      {{- include "azuredisk.pullSecrets" . | indent 6 }}
+      securityContext:
+        seccompProfile:
+          type: RuntimeDefault
+        windowsOptions:
+          hostProcess: true
+          runAsUserName: "NT AUTHORITY\\SYSTEM"
+      hostNetwork: true
+      initContainers:
+        - name: init
+{{- if hasPrefix "/" .Values.image.azuredisk.repository }}
+          image: "{{ .Values.image.baseRepo }}{{ .Values.image.azuredisk.repository }}:{{ .Values.image.azuredisk.tag }}-windows-hp"
+{{- else }}
+          image: "{{ .Values.image.azuredisk.repository }}:{{ .Values.image.azuredisk.tag }}-windows-hp"
+{{- end }}
+          imagePullPolicy: {{ .Values.image.azuredisk.pullPolicy }}
+          command:
+            - "powershell.exe"
+            - "-c"
+            - "New-Item -ItemType Directory -Path C:\\var\\lib\\kubelet\\plugins\\{{ .Values.driver.name }}\\ -Force"
+          securityContext:
+            capabilities:
+              drop:
+              - ALL
+      containers:
+        - name: node-driver-registrar
+{{- if hasPrefix "/" .Values.image.nodeDriverRegistrar.repository }}
+          image: "{{ .Values.image.baseRepo }}{{ .Values.image.nodeDriverRegistrar.repository }}:{{ .Values.image.nodeDriverRegistrar.tag }}"
+{{- else }}
+          image: "{{ .Values.image.nodeDriverRegistrar.repository }}:{{ .Values.image.nodeDriverRegistrar.tag }}"
+{{- end }}
+          command:
+            - "csi-node-driver-registrar.exe"
+          args:
+            - "--csi-address=$(CSI_ENDPOINT)"
+            - "--kubelet-registration-path=$(DRIVER_REG_SOCK_PATH)"
+            - "--plugin-registration-path=$(PLUGIN_REG_DIR)"
+            - "--v=2"
+          env:
+            - name: CSI_ENDPOINT
+              value: unix://{{ .Values.windows.kubelet }}\plugins\{{ .Values.driver.name }}\csi.sock
+            - name: DRIVER_REG_SOCK_PATH
+              value: C:\\var\\lib\\kubelet\\plugins\\{{ .Values.driver.name }}\\csi.sock
+            - name: PLUGIN_REG_DIR
+              value: C:\\var\\lib\\kubelet\\plugins_registry\\
+            - name: KUBE_NODE_NAME
+              valueFrom:
+                fieldRef:
+                  fieldPath: spec.nodeName
+          imagePullPolicy: {{ .Values.image.nodeDriverRegistrar.pullPolicy }}
+          resources: {{- toYaml .Values.windows.resources.nodeDriverRegistrar | nindent 12 }}
+          securityContext:
+            capabilities:
+              drop:
+              - ALL
+        - name: azuredisk
+{{- if hasPrefix "/" .Values.image.azuredisk.repository }}
+          image: "{{ .Values.image.baseRepo }}{{ .Values.image.azuredisk.repository }}:{{ .Values.image.azuredisk.tag }}-windows-hp"
+{{- else }}
+          image: "{{ .Values.image.azuredisk.repository }}:{{ .Values.image.azuredisk.tag }}-windows-hp"
+{{- end }}
+          command:
+            - "azurediskplugin.exe"
+          args:
+            - "--v={{ .Values.node.logLevel }}"
+            - "--endpoint=$(CSI_ENDPOINT)"
+            - "--nodeid=$(KUBE_NODE_NAME)"
+            - "--drivername={{ .Values.driver.name }}"
+            - "--volume-attach-limit={{ .Values.driver.volumeAttachLimit }}"
+            - "--reserved-data-disk-slot-num={{ .Values.node.reservedDataDiskSlotNum }}"
+            - "--cloud-config-secret-name={{ .Values.node.cloudConfigSecretName }}"
+            - "--cloud-config-secret-namespace={{ .Values.node.cloudConfigSecretNamespace }}"
+            - "--custom-user-agent={{ .Values.driver.customUserAgent }}"
+            - "--user-agent-suffix={{ .Values.driver.userAgentSuffix }}"
+            - "--allow-empty-cloud-config={{ .Values.node.allowEmptyCloudConfig }}"
+            - "--support-zone={{ .Values.node.supportZone }}"
+            - "--enable-windows-host-process=true"
+            - "--get-nodeid-from-imds={{ .Values.node.getNodeIDFromIMDS }}"
+            - "--enable-otel-tracing={{ .Values.windows.otelTracing.enabled }}"
+          env:
+            - name: AZURE_CREDENTIAL_FILE
+              valueFrom:
+                configMapKeyRef:
+                  name: {{ .Values.azureCredentialFileConfigMap }}
+                  key: path-windows
+                  optional: true
+            - name: CSI_ENDPOINT
+              value: unix://C:\\var\\lib\\kubelet\\plugins\\{{ .Values.driver.name }}\\csi.sock
+            {{- if ne .Values.driver.httpsProxy "" }}
+            - name: HTTPS_PROXY
+              value: {{ .Values.driver.httpsProxy }}
+            {{- end }}
+            {{- if ne .Values.driver.httpProxy "" }}
+            - name: HTTP_PROXY
+              value: {{ .Values.driver.httpProxy }}
+            {{- end }}
+            {{- if ne .Values.driver.noProxy "" }}
+            - name: NO_PROXY
+              value: {{ .Values.driver.noProxy }}
+            {{- end }}
+            - name: KUBE_NODE_NAME
+              valueFrom:
+                fieldRef:
+                  apiVersion: v1
+                  fieldPath: spec.nodeName
+            - name: AZURE_GO_SDK_LOG_LEVEL
+              value: {{ .Values.driver.azureGoSDKLogLevel }}
+            {{- if eq .Values.cloud "AzureStackCloud" }}
+            - name: AZURE_ENVIRONMENT_FILEPATH
+              value: C:\k\azurestackcloud.json
+            {{- end }}
+            {{- if .Values.windows.otelTracing.enabled }}
+            - name: OTEL_SERVICE_NAME
+              value: {{ .Values.windows.otelTracing.otelServiceName }}
+            - name: OTEL_EXPORTER_OTLP_ENDPOINT
+              value: {{ .Values.windows.otelTracing.otelExporterEndpoint }}
+            {{- end }}
+          imagePullPolicy: {{ .Values.image.azuredisk.pullPolicy }}
+          securityContext:
+            capabilities:
+              drop:
+              - ALL
+{{- end -}}
diff --git a/charts/v1.31.2/azuredisk-csi-driver/templates/csi-azuredisk-node-windows.yaml b/charts/v1.31.2/azuredisk-csi-driver/templates/csi-azuredisk-node-windows.yaml
new file mode 100644
index 0000000000..1ebf5713bb
--- /dev/null
+++ b/charts/v1.31.2/azuredisk-csi-driver/templates/csi-azuredisk-node-windows.yaml
@@ -0,0 +1,248 @@
+{{- if and (.Values.windows.enabled) (ne .Values.windows.useHostProcessContainers true) }}
+kind: DaemonSet
+apiVersion: apps/v1
+metadata:
+  name: {{ .Values.windows.dsName }}
+  namespace: {{ .Release.Namespace }}
+{{ include "azuredisk.labels" . | indent 2 }}
+{{- with .Values.windows.labels }}
+{{ . | toYaml | indent 4 }}
+{{- end }}
+{{- with .Values.windows.annotations }}
+  annotations:
+{{ . | toYaml | indent 4 }}
+{{- end }}
+spec:
+  updateStrategy:
+    rollingUpdate:
+      maxUnavailable: {{ .Values.node.maxUnavailable }}
+    type: RollingUpdate
+  selector:
+    matchLabels:
+      app: {{ .Values.windows.dsName }}
+  template:
+    metadata:
+{{ include "azuredisk.labels" . | indent 6 }}
+        app: {{ .Values.windows.dsName }}
+{{- with .Values.windows.podLabels }}
+{{ toYaml . | indent 8 }}
+{{- end }}
+{{- with .Values.windows.podAnnotations }}
+      annotations:
+{{ toYaml . | indent 8 }}
+{{- end }}
+    spec:
+      serviceAccountName: {{ .Values.serviceAccount.node }}
+{{- with .Values.windows.tolerations }}
+      tolerations:
+{{ toYaml . | indent 8 }}
+{{- end }}
+      nodeSelector:
+        kubernetes.io/os: windows
+{{- with .Values.windows.nodeSelector }}
+{{ toYaml . | indent 8 }}
+{{- end }}
+      affinity:
+{{- with .Values.windows.affinity }}
+{{ toYaml . | indent 8 }}
+{{- end }}
+        nodeAffinity:
+{{ toYaml .Values.windows.nodeAffinity | indent 10 }}
+      priorityClassName: system-node-critical
+      securityContext:
+        seccompProfile:
+          type: RuntimeDefault
+      {{- include "azuredisk.pullSecrets" . | indent 6 }}
+      containers:
+        - name: liveness-probe
+          volumeMounts:
+            - mountPath: C:\csi
+              name: plugin-dir
+{{- if hasPrefix "/" .Values.image.livenessProbe.repository }}
+          image: "{{ .Values.image.baseRepo }}{{ .Values.image.livenessProbe.repository }}:{{ .Values.image.livenessProbe.tag }}"
+{{- else }}
+          image: "{{ .Values.image.livenessProbe.repository }}:{{ .Values.image.livenessProbe.tag }}"
+{{- end }}
+          args:
+            - "--csi-address=$(CSI_ENDPOINT)"
+            - "--probe-timeout=30s"
+            - "--health-port={{ .Values.node.livenessProbe.healthPort }}"
+            - "--v=2"
+          env:
+            - name: CSI_ENDPOINT
+              value: unix://C:\\csi\\csi.sock
+          imagePullPolicy: {{ .Values.image.livenessProbe.pullPolicy }}
+          resources: {{- toYaml .Values.windows.resources.livenessProbe | nindent 12 }}
+          securityContext:
+            capabilities:
+              drop:
+              - ALL
+        - name: node-driver-registrar
+{{- if hasPrefix "/" .Values.image.nodeDriverRegistrar.repository }}
+          image: "{{ .Values.image.baseRepo }}{{ .Values.image.nodeDriverRegistrar.repository }}:{{ .Values.image.nodeDriverRegistrar.tag }}"
+{{- else }}
+          image: "{{ .Values.image.nodeDriverRegistrar.repository }}:{{ .Values.image.nodeDriverRegistrar.tag }}"
+{{- end }}
+          args:
+            - "--v=2"
+            - "--csi-address=$(CSI_ENDPOINT)"
+            - "--kubelet-registration-path=$(DRIVER_REG_SOCK_PATH)"
+          env:
+            - name: CSI_ENDPOINT
+              value: unix://C:\\csi\\csi.sock
+            - name: DRIVER_REG_SOCK_PATH
+              value: C:\\var\\lib\\kubelet\\plugins\\{{ .Values.driver.name }}\\csi.sock
+            - name: KUBE_NODE_NAME
+              valueFrom:
+                fieldRef:
+                  fieldPath: spec.nodeName
+          imagePullPolicy: {{ .Values.image.nodeDriverRegistrar.pullPolicy }}
+          volumeMounts:
+            - name: kubelet-dir
+              mountPath: "C:\\var\\lib\\kubelet"
+            - name: plugin-dir
+              mountPath: C:\csi
+            - name: registration-dir
+              mountPath: C:\registration
+          resources: {{- toYaml .Values.windows.resources.nodeDriverRegistrar | nindent 12 }}
+          securityContext:
+            capabilities:
+              drop:
+              - ALL
+        - name: azuredisk
+{{- if hasPrefix "/" .Values.image.azuredisk.repository }}
+          image: "{{ .Values.image.baseRepo }}{{ .Values.image.azuredisk.repository }}:{{ .Values.image.azuredisk.tag }}"
+{{- else }}
+          image: "{{ .Values.image.azuredisk.repository }}:{{ .Values.image.azuredisk.tag }}"
+{{- end }}
+          args:
+            - "--v={{ .Values.node.logLevel }}"
+            - "--endpoint=$(CSI_ENDPOINT)"
+            - "--nodeid=$(KUBE_NODE_NAME)"
+            - "--drivername={{ .Values.driver.name }}"
+            - "--volume-attach-limit={{ .Values.driver.volumeAttachLimit }}"
+            - "--reserved-data-disk-slot-num={{ .Values.node.reservedDataDiskSlotNum }}"
+            - "--cloud-config-secret-name={{ .Values.node.cloudConfigSecretName }}"
+            - "--cloud-config-secret-namespace={{ .Values.node.cloudConfigSecretNamespace }}"
+            - "--custom-user-agent={{ .Values.driver.customUserAgent }}"
+            - "--user-agent-suffix={{ .Values.driver.userAgentSuffix }}"
+            - "--allow-empty-cloud-config={{ .Values.node.allowEmptyCloudConfig }}"
+            - "--support-zone={{ .Values.node.supportZone }}"
+            - "--get-node-info-from-labels={{ .Values.windows.getNodeInfoFromLabels }}"
+            - "--get-nodeid-from-imds={{ .Values.node.getNodeIDFromIMDS }}"
+            - "--enable-otel-tracing={{ .Values.windows.otelTracing.enabled }}"
+          ports:
+            - containerPort: {{ .Values.node.livenessProbe.healthPort }}
+              name: healthz
+              protocol: TCP
+          livenessProbe:
+            failureThreshold: 5
+            httpGet:
+              path: /healthz
+              port: healthz
+            initialDelaySeconds: 60
+            timeoutSeconds: 30
+            periodSeconds: 30
+          env:
+            - name: AZURE_CREDENTIAL_FILE
+              valueFrom:
+                configMapKeyRef:
+                  name: {{ .Values.azureCredentialFileConfigMap }}
+                  key: path-windows
+                  optional: true
+            - name: CSI_ENDPOINT
+              value: unix://C:\\csi\\csi.sock
+            {{- if ne .Values.driver.httpsProxy "" }}
+            - name: HTTPS_PROXY
+              value: {{ .Values.driver.httpsProxy }}
+            {{- end }}
+            {{- if ne .Values.driver.httpProxy "" }}
+            - name: HTTP_PROXY
+              value: {{ .Values.driver.httpProxy }}
+            {{- end }}
+            {{- if ne .Values.driver.noProxy "" }}
+            - name: NO_PROXY
+              value: {{ .Values.driver.noProxy }}
+            {{- end }}
+            - name: KUBE_NODE_NAME
+              valueFrom:
+                fieldRef:
+                  apiVersion: v1
+                  fieldPath: spec.nodeName
+            - name: AZURE_GO_SDK_LOG_LEVEL
+              value: {{ .Values.driver.azureGoSDKLogLevel }}
+            {{- if eq .Values.cloud "AzureStackCloud" }}
+            - name: AZURE_ENVIRONMENT_FILEPATH
+              value: C:\k\azurestackcloud.json
+            {{- end }}
+            {{- if .Values.windows.otelTracing.enabled }}
+            - name: OTEL_SERVICE_NAME
+              value: {{ .Values.windows.otelTracing.otelServiceName }}
+            - name: OTEL_EXPORTER_OTLP_ENDPOINT
+              value: {{ .Values.windows.otelTracing.otelExporterEndpoint }}
+            {{- end }}
+          imagePullPolicy: {{ .Values.image.azuredisk.pullPolicy }}
+          volumeMounts:
+            - name: kubelet-dir
+              mountPath: "C:\\var\\lib\\kubelet"
+            - name: plugin-dir
+              mountPath: C:\csi
+            - name: azure-config
+              mountPath: C:\k
+            - name: csi-proxy-fs-pipe-v1
+              mountPath: \\.\pipe\csi-proxy-filesystem-v1
+            - name: csi-proxy-disk-pipe-v1
+              mountPath: \\.\pipe\csi-proxy-disk-v1
+            - name: csi-proxy-volume-pipe-v1
+              mountPath: \\.\pipe\csi-proxy-volume-v1
+            # these paths are still included for compatibility, they're used
+            # only if the node has still the beta version of the CSI proxy
+            - name: csi-proxy-fs-pipe-v1beta1
+              mountPath: \\.\pipe\csi-proxy-filesystem-v1beta1
+            - name: csi-proxy-disk-pipe-v1beta2
+              mountPath: \\.\pipe\csi-proxy-disk-v1beta2
+            - name: csi-proxy-volume-pipe-v1beta2
+              mountPath: \\.\pipe\csi-proxy-volume-v1beta2
+          resources: {{- toYaml .Values.windows.resources.azuredisk | nindent 12 }}
+          securityContext:
+            capabilities:
+              drop:
+              - ALL
+      volumes:
+        - name: csi-proxy-fs-pipe-v1
+          hostPath:
+            path: \\.\pipe\csi-proxy-filesystem-v1
+        - name: csi-proxy-disk-pipe-v1
+          hostPath:
+            path: \\.\pipe\csi-proxy-disk-v1
+        - name: csi-proxy-volume-pipe-v1
+          hostPath:
+            path: \\.\pipe\csi-proxy-volume-v1
+        # these paths are still included for compatibility, they're used
+        # only if the node has still the beta version of the CSI proxy
+        - name: csi-proxy-fs-pipe-v1beta1
+          hostPath:
+            path: \\.\pipe\csi-proxy-filesystem-v1beta1
+        - name: csi-proxy-disk-pipe-v1beta2
+          hostPath:
+            path: \\.\pipe\csi-proxy-disk-v1beta2
+        - name: csi-proxy-volume-pipe-v1beta2
+          hostPath:
+            path: \\.\pipe\csi-proxy-volume-v1beta2
+        - name: registration-dir
+          hostPath:
+            path: {{ .Values.windows.kubelet }}\plugins_registry\
+            type: Directory
+        - name: kubelet-dir
+          hostPath:
+            path: {{ .Values.windows.kubelet }}\
+            type: Directory
+        - name: plugin-dir
+          hostPath:
+            path: {{ .Values.windows.kubelet }}\plugins\{{ .Values.driver.name }}\
+            type: DirectoryOrCreate
+        - name: azure-config
+          hostPath:
+            path: C:\k
+            type: DirectoryOrCreate
+{{- end -}}
diff --git a/charts/v1.31.2/azuredisk-csi-driver/templates/csi-azuredisk-node.yaml b/charts/v1.31.2/azuredisk-csi-driver/templates/csi-azuredisk-node.yaml
new file mode 100644
index 0000000000..b1d624a8fb
--- /dev/null
+++ b/charts/v1.31.2/azuredisk-csi-driver/templates/csi-azuredisk-node.yaml
@@ -0,0 +1,270 @@
+{{- if .Values.linux.enabled}}
+kind: DaemonSet
+apiVersion: apps/v1
+metadata:
+  name: {{ .Values.linux.dsName }}
+  namespace: {{ .Release.Namespace }}
+{{ include "azuredisk.labels" . | indent 2 }}
+{{- with .Values.linux.labels }}
+{{ . | toYaml | indent 4 }}
+{{- end }}
+{{- with .Values.linux.annotations }}
+  annotations:
+{{ . | toYaml | indent 4 }}
+{{- end }}
+spec:
+  updateStrategy:
+    rollingUpdate:
+      maxUnavailable: {{ .Values.node.maxUnavailable }}
+    type: RollingUpdate
+  selector:
+    matchLabels:
+      app: {{ .Values.linux.dsName }}
+  template:
+    metadata:
+{{ include "azuredisk.labels" . | indent 6 }}
+        app: {{ .Values.linux.dsName }}
+        {{- if .Values.workloadIdentity.clientID }}
+        azure.workload.identity/use: "true"
+        {{- end }}
+{{- with .Values.linux.podLabels }}
+{{ toYaml . | indent 8 }}
+{{- end }}
+{{- with .Values.linux.podAnnotations }}
+      annotations:
+{{ toYaml . | indent 8 }}
+{{- end }}
+    spec:
+      {{- if .Values.imagePullSecrets }}
+      imagePullSecrets:
+{{ toYaml .Values.imagePullSecrets | indent 8 }}
+      {{- end }}
+      hostNetwork: {{ .Values.linux.hostNetwork }}
+      dnsPolicy: Default
+      serviceAccountName: {{ .Values.serviceAccount.node }}
+      nodeSelector:
+        kubernetes.io/os: linux
+{{- with .Values.linux.nodeSelector }}
+{{ toYaml . | indent 8 }}
+{{- end }}
+      affinity:
+{{- with .Values.linux.affinity }}
+{{ toYaml . | indent 8 }}
+{{- end }}
+        nodeAffinity:
+{{ toYaml .Values.linux.nodeAffinity | indent 10 }}
+      priorityClassName: system-node-critical
+      securityContext:
+        seccompProfile:
+          type: RuntimeDefault
+{{- with .Values.linux.tolerations }}
+      tolerations:
+{{ toYaml . | indent 8 }}
+{{- end }}
+      {{- include "azuredisk.pullSecrets" . | indent 6 }}
+      containers:
+        - name: liveness-probe
+          volumeMounts:
+            - mountPath: /csi
+              name: socket-dir
+{{- if hasPrefix "/" .Values.image.livenessProbe.repository }}
+          image: "{{ .Values.image.baseRepo }}{{ .Values.image.livenessProbe.repository }}:{{ .Values.image.livenessProbe.tag }}"
+{{- else }}
+          image: "{{ .Values.image.livenessProbe.repository }}:{{ .Values.image.livenessProbe.tag }}"
+{{- end }}
+          args:
+            - --csi-address=/csi/csi.sock
+            - --probe-timeout=3s
+{{- if eq .Values.node.hostNetwork true }}
+            - --http-endpoint=localhost:{{ .Values.node.livenessProbe.healthPort }}
+{{- else }}
+            - --health-port={{ .Values.node.livenessProbe.healthPort }}
+{{- end }}
+            - --v=2
+          resources: {{- toYaml .Values.linux.resources.livenessProbe | nindent 12 }}
+          securityContext:
+            capabilities:
+              drop:
+              - ALL
+        - name: node-driver-registrar
+{{- if hasPrefix "/" .Values.image.nodeDriverRegistrar.repository }}
+          image: "{{ .Values.image.baseRepo }}{{ .Values.image.nodeDriverRegistrar.repository }}:{{ .Values.image.nodeDriverRegistrar.tag }}"
+{{- else }}
+          image: "{{ .Values.image.nodeDriverRegistrar.repository }}:{{ .Values.image.nodeDriverRegistrar.tag }}"
+{{- end }}
+          args:
+            - --csi-address=$(ADDRESS)
+            - --kubelet-registration-path=$(DRIVER_REG_SOCK_PATH)
+            - --v=2
+          env:
+            - name: ADDRESS
+              value: /csi/csi.sock
+            - name: DRIVER_REG_SOCK_PATH
+              value: {{ .Values.linux.kubelet }}/plugins/{{ .Values.driver.name }}/csi.sock
+          volumeMounts:
+            - name: socket-dir
+              mountPath: /csi
+            - name: registration-dir
+              mountPath: /registration
+          resources: {{- toYaml .Values.linux.resources.nodeDriverRegistrar | nindent 12 }}
+          securityContext:
+            capabilities:
+              drop:
+              - ALL
+        - name: azuredisk
+{{- if hasPrefix "/" .Values.image.azuredisk.repository }}
+          image: "{{ .Values.image.baseRepo }}{{ .Values.image.azuredisk.repository }}:{{ .Values.image.azuredisk.tag }}"
+{{- else }}
+          image: "{{ .Values.image.azuredisk.repository }}:{{ .Values.image.azuredisk.tag }}"
+{{- end }}
+          args:
+            - "--v={{ .Values.node.logLevel }}"
+            - "--endpoint=$(CSI_ENDPOINT)"
+            - "--nodeid=$(KUBE_NODE_NAME)"
+            - "--enable-perf-optimization={{ .Values.linux.enablePerfOptimization }}"
+            - "--drivername={{ .Values.driver.name }}"
+            - "--volume-attach-limit={{ .Values.driver.volumeAttachLimit }}"
+            - "--reserved-data-disk-slot-num={{ .Values.node.reservedDataDiskSlotNum }}"
+            - "--cloud-config-secret-name={{ .Values.node.cloudConfigSecretName }}"
+            - "--cloud-config-secret-namespace={{ .Values.node.cloudConfigSecretNamespace }}"
+            - "--custom-user-agent={{ .Values.driver.customUserAgent }}"
+            - "--user-agent-suffix={{ .Values.driver.userAgentSuffix }}"
+            - "--allow-empty-cloud-config={{ .Values.node.allowEmptyCloudConfig }}"
+            - "--support-zone={{ .Values.node.supportZone }}"
+            - "--get-node-info-from-labels={{ .Values.linux.getNodeInfoFromLabels }}"
+            - "--get-nodeid-from-imds={{ .Values.node.getNodeIDFromIMDS }}"
+            - "--enable-otel-tracing={{ .Values.linux.otelTracing.enabled }}"
+{{- if ne .Values.node.hostNetwork true }}
+          ports:
+            - containerPort: {{ .Values.node.livenessProbe.healthPort }}
+              name: healthz
+              protocol: TCP
+{{- end }}
+          livenessProbe:
+            failureThreshold: 5
+            httpGet:
+              path: /healthz
+{{- if eq .Values.node.hostNetwork true }}
+              host: localhost
+              port: {{ .Values.node.livenessProbe.healthPort }}
+{{- else }}
+              port: healthz
+{{- end }}
+            initialDelaySeconds: 30
+            timeoutSeconds: 10
+            periodSeconds: 30
+          env:
+            - name: AZURE_CREDENTIAL_FILE
+              valueFrom:
+                configMapKeyRef:
+                  name: {{ .Values.azureCredentialFileConfigMap }}
+                  key: path
+                  optional: true
+            - name: CSI_ENDPOINT
+              value: unix:///csi/csi.sock
+            {{- if ne .Values.driver.httpsProxy "" }}
+            - name: HTTPS_PROXY
+              value: {{ .Values.driver.httpsProxy }}
+            {{- end }}
+            {{- if ne .Values.driver.httpProxy "" }}
+            - name: HTTP_PROXY
+              value: {{ .Values.driver.httpProxy }}
+            {{- end }}
+            {{- if ne .Values.driver.noProxy "" }}
+            - name: NO_PROXY
+              value: {{ .Values.driver.noProxy }}
+            {{- end }}
+            - name: KUBE_NODE_NAME
+              valueFrom:
+                fieldRef:
+                  apiVersion: v1
+                  fieldPath: spec.nodeName
+            - name: AZURE_GO_SDK_LOG_LEVEL
+              value: {{ .Values.driver.azureGoSDKLogLevel }}
+            {{- if eq .Values.cloud "AzureStackCloud" }}
+            - name: AZURE_ENVIRONMENT_FILEPATH
+              value: /etc/kubernetes/azurestackcloud.json
+            {{- end }}
+            {{- if .Values.linux.otelTracing.enabled }}
+            - name: OTEL_SERVICE_NAME
+              value: {{ .Values.linux.otelTracing.otelServiceName }}
+            - name: OTEL_EXPORTER_OTLP_ENDPOINT
+              value: {{ .Values.linux.otelTracing.otelExporterEndpoint }}
+            {{- end }}
+          imagePullPolicy: {{ .Values.image.azuredisk.pullPolicy }}
+          securityContext:
+            privileged: true
+            capabilities:
+              drop:
+              - ALL
+          volumeMounts:
+            - mountPath: /csi
+              name: socket-dir
+            - mountPath: {{ .Values.linux.kubelet }}/
+              mountPropagation: Bidirectional
+              name: mountpoint-dir
+            - mountPath: /etc/kubernetes/
+              name: azure-cred
+            - mountPath: /dev
+              name: device-dir
+            - mountPath: /sys/bus/scsi/devices
+              name: sys-devices-dir
+            - mountPath: /sys/class/
+              name: sys-class
+            {{- if and (eq .Values.cloud "AzureStackCloud") (ne .Values.linux.distro "fedora") }}
+            - name: ssl
+              mountPath: /etc/ssl/certs
+              readOnly: true
+            {{- end }}
+            {{- if eq .Values.linux.distro "fedora" }}
+            - name: ssl
+              mountPath: /etc/ssl/certs
+              readOnly: true
+            - name: ssl-pki
+              mountPath: /etc/pki/ca-trust/extracted
+              readOnly: true
+            {{- end }}
+          resources: {{- toYaml .Values.linux.resources.azuredisk | nindent 12 }}
+      volumes:
+        - hostPath:
+            path: {{ .Values.linux.kubelet }}/plugins/{{ .Values.driver.name }}
+            type: DirectoryOrCreate
+          name: socket-dir
+        - hostPath:
+            path: {{ .Values.linux.kubelet }}/
+            type: DirectoryOrCreate
+          name: mountpoint-dir
+        - hostPath:
+            path: {{ .Values.linux.kubelet }}/plugins_registry/
+            type: DirectoryOrCreate
+          name: registration-dir
+        - hostPath:
+            path: /etc/kubernetes/
+            type: DirectoryOrCreate
+          name: azure-cred
+        - hostPath:
+            path: /dev
+            type: Directory
+          name: device-dir
+        - hostPath:
+            path: /sys/bus/scsi/devices
+            type: Directory
+          name: sys-devices-dir
+        - hostPath:
+            path: /sys/class/
+            type: Directory
+          name: sys-class
+        {{- if and (eq .Values.cloud "AzureStackCloud") (ne .Values.linux.distro "fedora") }}
+        - name: ssl
+          hostPath:
+            path: /etc/ssl/certs
+        {{- end }}
+        {{- if eq .Values.linux.distro "fedora" }}
+        - name: ssl
+          hostPath:
+            path: /etc/ssl/certs
+        - name: ssl-pki
+          hostPath:
+            path: /etc/pki/ca-trust/extracted
+        {{- end }}
+{{- end -}}
diff --git a/charts/v1.31.2/azuredisk-csi-driver/templates/csi-snapshot-controller.yaml b/charts/v1.31.2/azuredisk-csi-driver/templates/csi-snapshot-controller.yaml
new file mode 100644
index 0000000000..a7f1a10bce
--- /dev/null
+++ b/charts/v1.31.2/azuredisk-csi-driver/templates/csi-snapshot-controller.yaml
@@ -0,0 +1,115 @@
+{{- if .Values.snapshot.enabled -}}
+kind: Deployment
+apiVersion: apps/v1
+metadata:
+  name: {{ .Values.snapshot.snapshotController.name }}
+  namespace: {{ .Release.Namespace }}
+{{ include "azuredisk.labels" . | indent 2 }}
+{{- with .Values.snapshot.snapshotController.labels }}
+{{ . | toYaml | indent 4 }}
+{{- end }}
+{{- with .Values.snapshot.snapshotController.annotations }}
+  annotations:
+{{ . | toYaml | indent 4 }}
+{{- end }}
+spec:
+  replicas: {{ .Values.snapshot.snapshotController.replicas }}
+  selector:
+    matchLabels:
+      app: {{ .Values.snapshot.snapshotController.name }}
+  # the snapshot controller won't be marked as ready if the v1 CRDs are unavailable
+  # in #504 the snapshot-controller will exit after around 7.5 seconds if it
+  # can't find the v1 CRDs so this value should be greater than that
+  minReadySeconds: 15
+  strategy:
+    rollingUpdate:
+      maxSurge: 0
+      maxUnavailable: 1
+    type: RollingUpdate
+  template:
+    metadata:
+{{ include "azuredisk.labels" . | indent 6 }}
+        app: {{ .Values.snapshot.snapshotController.name }}
+{{- with .Values.snapshot.snapshotController.podLabels }}
+{{ toYaml . | indent 8 }}
+{{- end }}
+{{- with .Values.snapshot.snapshotController.podAnnotations }}
+      annotations:
+{{ toYaml . | indent 8 }}
+{{- end }}
+    spec:
+      serviceAccountName: {{ .Values.serviceAccount.snapshotController }}
+      nodeSelector:
+        kubernetes.io/os: linux
+    # runOnControlPlane=true or runOnMaster=true only takes effect if affinity is not set
+    {{- if contains (tpl "{{ .Values.controller.affinity }}" .) "nodeSelectorTerms" }}
+      {{- with .Values.controller.affinity }}
+      affinity:
+      {{ toYaml . | indent 8 }}
+      {{- end }}
+    {{- else if or .Values.controller.runOnControlPlane .Values.controller.runOnMaster}}
+      affinity:
+        nodeAffinity:
+          requiredDuringSchedulingIgnoredDuringExecution:
+            nodeSelectorTerms:
+              - matchExpressions:
+                {{- if .Values.controller.runOnControlPlane}}
+                - key: node-role.kubernetes.io/control-plane
+                  operator: Exists
+                {{- end}}
+                {{- if .Values.controller.runOnMaster}}
+                - key: node-role.kubernetes.io/master
+                  operator: Exists
+                {{- end}}
+    {{- end }}
+      priorityClassName: system-cluster-critical
+      securityContext:
+        seccompProfile:
+          type: RuntimeDefault
+{{- with .Values.controller.tolerations }}
+      tolerations:
+{{ toYaml . | indent 8 }}
+{{- end }}
+      {{- include "azuredisk.pullSecrets" . | indent 6 }}
+      containers:
+        - name: {{ .Values.snapshot.snapshotController.name }}
+{{- if hasPrefix "/" .Values.snapshot.image.csiSnapshotController.repository }}
+          image: "{{ .Values.image.baseRepo }}{{ .Values.snapshot.image.csiSnapshotController.repository }}:{{ .Values.snapshot.image.csiSnapshotController.tag }}"
+{{- else }}
+          image: "{{ .Values.snapshot.image.csiSnapshotController.repository }}:{{ .Values.snapshot.image.csiSnapshotController.tag }}"
+{{- end }}
+          args:
+            - "--v=2"
+            - "--leader-election=true"
+            - "--leader-election-namespace={{ .Release.Namespace }}"
+          resources: {{- toYaml .Values.snapshot.snapshotController.resources | nindent 12 }}
+          imagePullPolicy: {{ .Values.snapshot.image.csiSnapshotController.pullPolicy }}
+          securityContext:
+            capabilities:
+              drop:
+              - ALL
+
+---
+{{- if .Values.snapshot.VolumeSnapshotClass.enabled -}}
+kind: VolumeSnapshotClass
+apiVersion: snapshot.storage.k8s.io/v1
+metadata:
+  name: {{ .Values.snapshot.VolumeSnapshotClass.name }}
+  annotations:
+    # This is what defines this resource as a hook. Without this line, the
+    # job is considered part of the release.
+    "helm.sh/hook": post-install
+driver: {{ .Values.driver.name }}
+deletionPolicy: {{ .Values.snapshot.VolumeSnapshotClass.deletionPolicy }}
+parameters:
+  incremental: {{ .Values.snapshot.VolumeSnapshotClass.parameters.incremental }}
+  {{- if ne .Values.snapshot.VolumeSnapshotClass.parameters.resourceGroup "" }}
+  resourceGroup: {{ .Values.snapshot.VolumeSnapshotClass.parameters.resourceGroup }}
+  {{- end }}
+  tags: {{ .Values.snapshot.VolumeSnapshotClass.parameters.tags }}
+{{- with .Values.snapshot.VolumeSnapshotClass.additionalLabels }}
+additionalLabels:
+{{ toYaml . | indent 2 }}
+{{- end }}
+{{- end -}}
+{{- end -}}
diff --git a/charts/v1.31.2/azuredisk-csi-driver/templates/rbac-csi-azuredisk-controller.yaml b/charts/v1.31.2/azuredisk-csi-driver/templates/rbac-csi-azuredisk-controller.yaml
new file mode 100644
index 0000000000..80d7d7369a
--- /dev/null
+++ b/charts/v1.31.2/azuredisk-csi-driver/templates/rbac-csi-azuredisk-controller.yaml
@@ -0,0 +1,205 @@
+{{- if .Values.rbac.create -}}
+kind: ClusterRole
+apiVersion: rbac.authorization.k8s.io/v1
+metadata:
+  name: {{ .Values.rbac.name }}-external-provisioner-role
+{{ include "azuredisk.labels" . | indent 2 }}
+rules:
+  - apiGroups: [""]
+    resources: ["persistentvolumes"]
+    verbs: ["get", "list", "watch", "create", "patch", "delete"]
+  - apiGroups: [""]
+    resources: ["persistentvolumeclaims"]
+    verbs: ["get", "list", "watch", "update"]
+  - apiGroups: ["storage.k8s.io"]
+    resources: ["storageclasses"]
+    verbs: ["get", "list", "watch"]
+  - apiGroups: [""]
+    resources: ["events"]
+    verbs: ["get", "list", "watch", "create", "update", "patch"]
+  - apiGroups: ["storage.k8s.io"]
+    resources: ["csinodes"]
+    verbs: ["get", "list", "watch"]
+  - apiGroups: [""]
+    resources: ["nodes"]
+    verbs: ["get", "list", "watch"]
+  - apiGroups: ["snapshot.storage.k8s.io"]
+    resources: ["volumesnapshots"]
+    verbs: ["get", "list"]
+  - apiGroups: ["snapshot.storage.k8s.io"]
+    resources: ["volumesnapshotcontents"]
+    verbs: ["get", "list"]
+  - apiGroups: ["coordination.k8s.io"]
+    resources: ["leases"]
+    verbs: ["get", "watch", "list", "delete", "update", "create", "patch"]
+
+---
+
+kind: ClusterRoleBinding
+apiVersion: rbac.authorization.k8s.io/v1
+metadata:
+  name: {{ .Values.rbac.name }}-csi-provisioner-binding
+{{ include "azuredisk.labels" . | indent 2 }}
+subjects:
+  - kind: ServiceAccount
+    name: {{ .Values.serviceAccount.controller }}
+    namespace: {{ .Release.Namespace }}
+roleRef:
+  kind: ClusterRole
+  name: {{ .Values.rbac.name }}-external-provisioner-role
+  apiGroup: rbac.authorization.k8s.io
+
+---
+
+kind: ClusterRole
+apiVersion: rbac.authorization.k8s.io/v1
+metadata:
+  name: {{ .Values.rbac.name }}-external-attacher-role
+{{ include "azuredisk.labels" . | indent 2 }}
+rules:
+  - apiGroups: [""]
+    resources: ["persistentvolumes"]
+    verbs: ["get", "list", "watch", "update"]
+  - apiGroups: [""]
+    resources: ["nodes"]
+    verbs: ["get", "list", "watch"]
+  - apiGroups: ["csi.storage.k8s.io"]
+    resources: ["csinodeinfos"]
+    verbs: ["get", "list", "watch"]
+  - apiGroups: ["storage.k8s.io"]
+    resources: ["volumeattachments"]
+    verbs: ["get", "list", "watch", "update", "patch"]
+  - apiGroups: ["storage.k8s.io"]
+    resources: ["volumeattachments/status"]
+    verbs: ["get", "list", "watch", "update", "patch"]
+  - apiGroups: ["storage.k8s.io"]
+    resources: ["volumeattributesclasses"]
+    verbs: ["get"]
+  - apiGroups: ["coordination.k8s.io"]
+    resources: ["leases"]
+    verbs: ["get", "watch", "list", "delete", "update", "create", "patch"]
+---
+
+kind: ClusterRoleBinding
+apiVersion: rbac.authorization.k8s.io/v1
+metadata:
+  name: {{ .Values.rbac.name }}-csi-attacher-binding
+{{ include "azuredisk.labels" . | indent 2 }}
+subjects:
+  - kind: ServiceAccount
+    name: {{ .Values.serviceAccount.controller }}
+    namespace: {{ .Release.Namespace }}
+roleRef:
+  kind: ClusterRole
+  name: {{ .Values.rbac.name }}-external-attacher-role
+  apiGroup: rbac.authorization.k8s.io
+
+---
+
+kind: ClusterRole
+apiVersion: rbac.authorization.k8s.io/v1
+metadata:
+  name: {{ .Values.rbac.name }}-external-snapshotter-role
+{{ include "azuredisk.labels" . | indent 2 }}
+rules:
+  - apiGroups: [""]
+    resources: ["events"]
+    verbs: ["list", "watch", "create", "update", "patch"]
+  - apiGroups: [""]
+    resources: ["secrets"]
+    verbs: ["get", "list"]
+  - apiGroups: ["snapshot.storage.k8s.io"]
+    resources: ["volumesnapshotclasses"]
+    verbs: ["get", "list", "watch"]
+  - apiGroups: ["snapshot.storage.k8s.io"]
+    resources: ["volumesnapshotcontents"]
+    verbs: ["create", "get", "list", "watch", "update", "delete", "patch"]
+  - apiGroups: ["snapshot.storage.k8s.io"]
+    resources: ["volumesnapshotcontents/status"]
+    verbs: ["update", "patch"]
+  - apiGroups: ["coordination.k8s.io"]
+    resources: ["leases"]
+    verbs: ["get", "watch", "list", "delete", "update", "create", "patch"]
+---
+
+kind: ClusterRoleBinding
+apiVersion: rbac.authorization.k8s.io/v1
+metadata:
+  name: {{ .Values.rbac.name }}-csi-snapshotter-binding
+{{ include "azuredisk.labels" . | indent 2 }}
+subjects:
+  - kind: ServiceAccount
+    name: {{ .Values.serviceAccount.controller }}
+    namespace: {{ .Release.Namespace }}
+roleRef:
+  kind: ClusterRole
+  name: {{ .Values.rbac.name }}-external-snapshotter-role
+  apiGroup: rbac.authorization.k8s.io
+
+---
+kind: ClusterRole
+apiVersion: rbac.authorization.k8s.io/v1
+metadata:
+  name: {{ .Values.rbac.name }}-external-resizer-role
+{{ include "azuredisk.labels" . | indent 2 }}
+rules:
+  - apiGroups: [""]
+    resources: ["persistentvolumes"]
+    verbs: ["get", "list", "watch", "update", "patch"]
+  - apiGroups: [""]
+    resources: ["persistentvolumeclaims"]
+    verbs: ["get", "list", "watch"]
+  - apiGroups: [""]
+    resources: ["persistentvolumeclaims/status"]
+    verbs: ["update", "patch"]
+  - apiGroups: [""]
+    resources: ["events"]
+    verbs: ["list", "watch", "create", "update", "patch"]
+  - apiGroups: ["coordination.k8s.io"]
+    resources: ["leases"]
+    verbs: ["get", "watch", "list", "delete", "update", "create", "patch"]
+  - apiGroups: [""]
+    resources: ["pods"]
+    verbs: ["get", "list", "watch"]
+  - apiGroups: ["storage.k8s.io"]
+    resources: ["volumeattributesclasses"]
+    verbs: ["get", "list", "watch"]
+---
+kind: ClusterRoleBinding
+apiVersion: rbac.authorization.k8s.io/v1
+metadata:
+  name: {{ .Values.rbac.name }}-csi-resizer-role
+{{ include "azuredisk.labels" . | indent 2 }}
+subjects:
+  - kind: ServiceAccount
+    name: {{ .Values.serviceAccount.controller }}
+    namespace: {{ .Release.Namespace }}
+roleRef:
+  kind: ClusterRole
+  name: {{ .Values.rbac.name }}-external-resizer-role
+  apiGroup: rbac.authorization.k8s.io
+
+---
+kind: ClusterRole
+apiVersion: rbac.authorization.k8s.io/v1
+metadata:
+  name: csi-{{ .Values.rbac.name }}-controller-secret-role
+rules:
+  - apiGroups: [""]
+    resources: ["secrets"]
+    verbs: ["get"]
+
+---
+kind: ClusterRoleBinding
+apiVersion: rbac.authorization.k8s.io/v1
+metadata:
+  name: csi-{{ .Values.rbac.name }}-controller-secret-binding
+subjects:
+  - kind: ServiceAccount
+    name: {{ .Values.serviceAccount.controller }}
+    namespace: {{ .Release.Namespace }}
+roleRef:
+  kind: ClusterRole
+  name: csi-{{ .Values.rbac.name }}-controller-secret-role
+  apiGroup: rbac.authorization.k8s.io
+{{ end }}
diff --git a/charts/v1.31.2/azuredisk-csi-driver/templates/rbac-csi-azuredisk-node.yaml b/charts/v1.31.2/azuredisk-csi-driver/templates/rbac-csi-azuredisk-node.yaml
new file mode 100644
index 0000000000..29d99c91fe
--- /dev/null
+++ b/charts/v1.31.2/azuredisk-csi-driver/templates/rbac-csi-azuredisk-node.yaml
@@ -0,0 +1,31 @@
+{{- if .Values.rbac.create -}}
+---
+kind: ClusterRole
+apiVersion: rbac.authorization.k8s.io/v1
+metadata:
+  name: csi-{{ .Values.rbac.name }}-node-role
+rules:
+  - apiGroups: [""]
+    resources: ["secrets"]
+    verbs: ["get"]
+  - apiGroups: [""]
+    resources: ["nodes"]
+    verbs: ["get", "patch"]
+  - apiGroups: ["storage.k8s.io"]
+    resources: ["csinodes"]
+    verbs: ["get"]
+
+---
+kind: ClusterRoleBinding
+apiVersion: rbac.authorization.k8s.io/v1
+metadata:
+  name: csi-{{ .Values.rbac.name }}-node-secret-binding
+subjects:
+  - kind: ServiceAccount
+    name: {{ .Values.serviceAccount.node }}
+    namespace: {{ .Release.Namespace }}
+roleRef:
+  kind: ClusterRole
+  name: csi-{{ .Values.rbac.name }}-node-role
+  apiGroup: rbac.authorization.k8s.io
+{{ end }}
diff --git a/charts/v1.31.2/azuredisk-csi-driver/templates/rbac-csi-snapshot-controller.yaml b/charts/v1.31.2/azuredisk-csi-driver/templates/rbac-csi-snapshot-controller.yaml
new file mode 100644
index 0000000000..008fba02d1
--- /dev/null
+++ b/charts/v1.31.2/azuredisk-csi-driver/templates/rbac-csi-snapshot-controller.yaml
@@ -0,0 +1,72 @@
+{{- if and .Values.snapshot.enabled .Values.rbac.create -}}
+kind: ClusterRole
+apiVersion: rbac.authorization.k8s.io/v1
+metadata:
+  name: csi-snapshot-controller-role
+rules:
+  - apiGroups: [""]
+    resources: ["persistentvolumes"]
+    verbs: ["get", "list", "watch"]
+  - apiGroups: [""]
+    resources: ["persistentvolumeclaims"]
+    verbs: ["get", "list", "watch", "update"]
+  - apiGroups: ["storage.k8s.io"]
+    resources: ["storageclasses"]
+    verbs: ["get", "list", "watch"]
+  - apiGroups: [""]
+    resources: ["events"]
+    verbs: ["list", "watch", "create", "update", "patch"]
+  - apiGroups: ["snapshot.storage.k8s.io"]
+    resources: ["volumesnapshotclasses"]
+    verbs: ["get", "list", "watch"]
+  - apiGroups: ["snapshot.storage.k8s.io"]
+    resources: ["volumesnapshotcontents"]
+    verbs: ["create", "get", "list", "watch", "update", "delete", "patch"]
+  - apiGroups: ["snapshot.storage.k8s.io"]
+    resources: ["volumesnapshotcontents/status"]
+    verbs: ["patch"]
+  - apiGroups: ["snapshot.storage.k8s.io"]
+    resources: ["volumesnapshots"]
+    verbs: ["get", "list", "watch", "update", "patch", "create"]
+  - apiGroups: ["snapshot.storage.k8s.io"]
+    resources: ["volumesnapshots/status"]
+    verbs: ["update", "patch"]
+
+---
+kind: ClusterRoleBinding
+apiVersion: rbac.authorization.k8s.io/v1
+metadata:
+  name: csi-snapshot-controller-binding
+subjects:
+  - kind: ServiceAccount
+    name: {{ .Values.serviceAccount.snapshotController }}
+    namespace: {{ .Release.Namespace }}
+roleRef:
+  kind: ClusterRole
+  name: csi-snapshot-controller-role
+  apiGroup: rbac.authorization.k8s.io
+
+---
+kind: ClusterRole
+apiVersion: rbac.authorization.k8s.io/v1
+metadata:
+  name: csi-snapshot-controller-leaderelection-role
+rules:
+  - apiGroups: ["coordination.k8s.io"]
+    resources: ["leases"]
+    verbs: ["get", "watch", "list", "delete", "update", "create", "patch"]
+
+---
+kind: ClusterRoleBinding
+apiVersion: rbac.authorization.k8s.io/v1
+metadata:
+  name: csi-snapshot-controller-leaderelection-binding
+subjects:
+  - kind: ServiceAccount
+    name: {{ .Values.serviceAccount.snapshotController }}
+    namespace: {{ .Release.Namespace }}
+roleRef:
+  kind: ClusterRole
+  name: csi-snapshot-controller-leaderelection-role
+  apiGroup: rbac.authorization.k8s.io
+{{ end }}
diff --git a/charts/v1.31.2/azuredisk-csi-driver/templates/serviceaccount-csi-azuredisk-controller.yaml b/charts/v1.31.2/azuredisk-csi-driver/templates/serviceaccount-csi-azuredisk-controller.yaml
new file mode 100644
index 0000000000..1806e9c586
--- /dev/null
+++ b/charts/v1.31.2/azuredisk-csi-driver/templates/serviceaccount-csi-azuredisk-controller.yaml
@@ -0,0 +1,16 @@
+{{- if .Values.serviceAccount.create -}}
+apiVersion: v1
+kind: ServiceAccount
+metadata:
+  name: {{ .Values.serviceAccount.controller }}
+  namespace: {{ .Release.Namespace }}
+{{ include "azuredisk.labels" . | indent 2 }}
+{{- if .Values.workloadIdentity.clientID }}
+    azure.workload.identity/use: "true"
+  annotations:
+    azure.workload.identity/client-id: {{ .Values.workloadIdentity.clientID }}
+{{- if .Values.workloadIdentity.tenantID }}
+    azure.workload.identity/tenant-id: {{ .Values.workloadIdentity.tenantID }}
+{{- end }}
+{{- end }}
+{{- end -}}
diff --git a/charts/v1.31.2/azuredisk-csi-driver/templates/serviceaccount-csi-azuredisk-node.yaml b/charts/v1.31.2/azuredisk-csi-driver/templates/serviceaccount-csi-azuredisk-node.yaml
new file mode 100644
index 0000000000..dcc2ff60b3
--- /dev/null
+++ b/charts/v1.31.2/azuredisk-csi-driver/templates/serviceaccount-csi-azuredisk-node.yaml
@@ -0,0 +1,16 @@
+{{- if .Values.serviceAccount.create -}}
+apiVersion: v1
+kind: ServiceAccount
+metadata:
+  name: {{ .Values.serviceAccount.node }}
+  namespace: {{ .Release.Namespace }}
+{{ include "azuredisk.labels" . | indent 2 }}
+{{- if .Values.workloadIdentity.clientID }}
+    azure.workload.identity/use: "true"
+  annotations:
+    azure.workload.identity/client-id: {{ .Values.workloadIdentity.clientID }}
+{{- if .Values.workloadIdentity.tenantID }}
+    azure.workload.identity/tenant-id: {{ .Values.workloadIdentity.tenantID }}
+{{- end }}
+{{- end }}
+{{- end -}}
diff --git a/charts/v1.31.2/azuredisk-csi-driver/templates/serviceaccount-csi-snapshot-controller.yaml b/charts/v1.31.2/azuredisk-csi-driver/templates/serviceaccount-csi-snapshot-controller.yaml
new file mode 100644
index 0000000000..7cdaad0b4f
--- /dev/null
+++ b/charts/v1.31.2/azuredisk-csi-driver/templates/serviceaccount-csi-snapshot-controller.yaml
@@ -0,0 +1,7 @@
+{{- if and .Values.snapshot.enabled .Values.serviceAccount.create -}}
+apiVersion: v1
+kind: ServiceAccount
+metadata:
+  name: {{ .Values.serviceAccount.snapshotController }}
+  namespace: {{ .Release.Namespace }}
+{{- end -}}
diff --git a/charts/v1.31.2/azuredisk-csi-driver/values.yaml b/charts/v1.31.2/azuredisk-csi-driver/values.yaml
new file mode 100644
index 0000000000..b63e9b0b31
--- /dev/null
+++ b/charts/v1.31.2/azuredisk-csi-driver/values.yaml
@@ -0,0 +1,294 @@
+image:
+  baseRepo: mcr.microsoft.com
+  azuredisk:
+    repository: /oss/kubernetes-csi/azuredisk-csi
+    tag: v1.31.2
+    pullPolicy: IfNotPresent
+  csiProvisioner:
+    repository: /oss/kubernetes-csi/csi-provisioner
+    tag: v5.1.0
+    pullPolicy: IfNotPresent
+  csiAttacher:
+    repository: /oss/kubernetes-csi/csi-attacher
+    tag: v4.7.0
+    pullPolicy: IfNotPresent
+  csiResizer:
+    repository: /oss/kubernetes-csi/csi-resizer
+    tag: v1.12.0
+    pullPolicy: IfNotPresent
+  livenessProbe:
+    repository: /oss/kubernetes-csi/livenessprobe
+    tag: v2.14.0
+    pullPolicy: IfNotPresent
+  nodeDriverRegistrar:
+    repository: /oss/kubernetes-csi/csi-node-driver-registrar
+    tag: v2.12.0
+    pullPolicy: IfNotPresent
+
+serviceAccount:
+  create: true # When true, service accounts will be created for you. Set to false if you want to use your own.
+  controller: csi-azuredisk-controller-sa # Name of Service Account to be created or used
+  node: csi-azuredisk-node-sa # Name of Service Account to be created or used
+  snapshotController: csi-snapshot-controller-sa # Name of Service Account to be created or used
+
+rbac:
+  create: true
+  name: azuredisk
+
+controller:
+  name: csi-azuredisk-controller
+  cloudConfigSecretName: azure-cloud-provider
+  cloudConfigSecretNamespace: kube-system
+  allowEmptyCloudConfig: false
+  enableTrafficManager: false
+  trafficManagerPort: 7788
+  replicas: 2
+  metricsPort: 29604
+  livenessProbe:
+    healthPort: 29602
+  runOnMaster: false
+  runOnControlPlane: false
+  disableAvailabilitySetNodes: false
+  vmType: ""
+  provisionerWorkerThreads: 100
+  attacherWorkerThreads: 1000
+  vmssCacheTTLInSeconds: -1
+  logLevel: 5
+  extraArgs: []
+  otelTracing:
+    enabled: false
+    otelServiceName: csi-azuredisk-controller
+    otelExporterEndpoint: "http://localhost:4317"
+  tolerations:
+    - key: "node-role.kubernetes.io/master"
+      operator: "Exists"
+      effect: "NoSchedule"
+    - key: "node-role.kubernetes.io/controlplane"
+      operator: "Exists"
+      effect: "NoSchedule"
+    - key: "node-role.kubernetes.io/control-plane"
+      operator: "Exists"
+      effect: "NoSchedule"
+    - key: "CriticalAddonsOnly"
+      operator: "Exists"
+      effect: "NoSchedule"
+  hostNetwork: true # this setting could be disabled if controller does not depend on MSI setting
+  labels: {}
+  annotations: {}
+  podLabels: {}
+  podAnnotations: {}
+  nodeSelector: {}
+  affinity: {}
+  resources:
+    csiProvisioner:
+      limits:
+        memory: 500Mi
+      requests:
+        cpu: 10m
+        memory: 20Mi
+    csiAttacher:
+      limits:
+        memory: 500Mi
+      requests:
+        cpu: 10m
+        memory: 20Mi
+    csiResizer:
+      limits:
+        memory: 500Mi
+      requests:
+        cpu: 10m
+        memory: 20Mi
+    csiSnapshotter:
+      limits:
+        memory: 400Mi
+      requests:
+        cpu: 10m
+        memory: 20Mi
+    livenessProbe:
+      limits:
+        memory: 100Mi
+      requests:
+        cpu: 10m
+        memory: 20Mi
+    azuredisk:
+      limits:
+        memory: 500Mi
+      requests:
+        cpu: 10m
+        memory: 20Mi
+
+node:
+  cloudConfigSecretName: azure-cloud-provider
+  cloudConfigSecretNamespace: kube-system
+  # reserved data disk slot number per node, driver.volumeAttachLimit must be < 0
+  reservedDataDiskSlotNum: 0
+  supportZone: true
+  allowEmptyCloudConfig: true
+  getNodeIDFromIMDS: false
+  maxUnavailable: 1
+  logLevel: 5
+  livenessProbe:
+    healthPort: 29603
+
+snapshot:
+  enabled: false
+  name: csi-snapshot-controller
+  image:
+    csiSnapshotter:
+      repository: /oss/kubernetes-csi/csi-snapshotter
+      tag: v8.2.0
+      pullPolicy: IfNotPresent
+    csiSnapshotController:
+      repository: /oss/kubernetes-csi/snapshot-controller
+      tag: v8.2.0
+      pullPolicy: IfNotPresent
+  snapshotController:
+    name: csi-snapshot-controller
+    replicas: 2
+    labels: {}
+    annotations: {}
+    podLabels: {}
+    podAnnotations: {}
+    resources:
+      limits:
+        memory: 500Mi
+      requests:
+        cpu: 10m
+        memory: 20Mi
+  VolumeSnapshotClass:
+    enabled: false
+    name: csi-azuredisk-vsc
+    deletionPolicy: Delete
+    parameters:
+      incremental: '"true"' # available values: "true", "false" ("true" by default for Azure Public Cloud, and "false" by default for Azure Stack Cloud)
+      resourceGroup: "" # available values: EXISTING RESOURCE GROUP (If not specified, snapshot will be stored in the same resource group as source Azure disk)
+      tags: "" # tag format: 'key1=val1,key2=val2'
+    additionalLabels: {}
+
+feature:
+  enableFSGroupPolicy: true
+
+driver:
+  name: disk.csi.azure.com
+  # maximum number of attachable volumes per node,
+  # maximum number is defined according to node instance type by default(-1)
+  volumeAttachLimit: -1
+  customUserAgent: ""
+  userAgentSuffix: "OSS-helm"
+  azureGoSDKLogLevel: "" # available values: ""(no logs), DEBUG, INFO, WARNING, ERROR
+  httpsProxy: ""
+  httpProxy: ""
+  noProxy: ""
+
+linux:
+  enabled: true
+  dsName: csi-azuredisk-node # daemonset name
+  kubelet: /var/lib/kubelet
+  distro: debian # available values: debian, fedora
+  enablePerfOptimization: true
+  otelTracing:
+    enabled: false
+    otelServiceName: csi-azuredisk-node
+    otelExporterEndpoint: "http://localhost:4317"
+  tolerations:
+    - operator: "Exists"
+  hostNetwork: true # this setting could be disabled if perfProfile is `none`
+  getNodeInfoFromLabels: false # get node info from node labels instead of IMDS
+  labels: {}
+  annotations: {}
+  podLabels: {}
+  podAnnotations: {}
+  nodeSelector: {}
+  affinity: {}
+  nodeAffinity:
+    requiredDuringSchedulingIgnoredDuringExecution:
+      nodeSelectorTerms:
+        - matchExpressions:
+            - key: type
+              operator: NotIn
+              values:
+                - virtual-kubelet
+  resources:
+    livenessProbe:
+      limits:
+        memory: 100Mi
+      requests:
+        cpu: 10m
+        memory: 20Mi
+    nodeDriverRegistrar:
+      limits:
+        memory: 100Mi
+      requests:
+        cpu: 10m
+        memory: 20Mi
+    azuredisk:
+      limits:
+        memory: 1000Mi
+      requests:
+        cpu: 10m
+        memory: 20Mi
+
+windows:
+  enabled: true
+  useHostProcessContainers: true
+  dsName: csi-azuredisk-node-win # daemonset name
+  kubelet: 'C:\var\lib\kubelet'
+  getNodeInfoFromLabels: false # get node info from node labels instead of IMDS
+  enableRegistrationProbe: true
+  otelTracing:
+    enabled: false
+    otelServiceName: csi-azuredisk-node-win
+    otelExporterEndpoint: "http://localhost:4317"
+  tolerations:
+    - key: "node.kubernetes.io/os"
+      operator: "Exists"
+      effect: "NoSchedule"
+  labels: {}
+  annotations: {}
+  podLabels: {}
+  podAnnotations: {}
+  nodeSelector: {}
+  affinity: {}
+  nodeAffinity:
+    requiredDuringSchedulingIgnoredDuringExecution:
+      nodeSelectorTerms:
+        - matchExpressions:
+            - key: type
+              operator: NotIn
+              values:
+                - virtual-kubelet
+  resources:
+    livenessProbe:
+      limits:
+        memory: 150Mi
+      requests:
+        cpu: 10m
+        memory: 40Mi
+    nodeDriverRegistrar:
+      limits:
+        memory: 150Mi
+      requests:
+        cpu: 30m
+        memory: 40Mi
+    azuredisk:
+      limits:
+        memory: 1000Mi
+      requests:
+        cpu: 10m
+        memory: 40Mi
+
+cloud: AzurePublicCloud
+
+## Reference to one or more secrets to be used when pulling images
+## ref: https://kubernetes.io/docs/tasks/configure-pod-container/pull-image-private-registry/
+##
+imagePullSecrets: []
+# - name: "image-pull-secret"
+
+workloadIdentity:
+  clientID: ""
+  # [optional] If the AAD application or user-assigned managed identity is not in the same tenant as the cluster
+  # then set tenantID with the application or user-assigned managed identity tenant ID
+  tenantID: ""
+
+azureCredentialFileConfigMap: azure-cred-file
diff --git a/deploy/csi-azuredisk-controller.yaml b/deploy/csi-azuredisk-controller.yaml
index d19f9d6704..852d4ccf88 100644
--- a/deploy/csi-azuredisk-controller.yaml
+++ b/deploy/csi-azuredisk-controller.yaml
@@ -168,7 +168,7 @@ spec:
               drop:
                 - ALL
         - name: azuredisk
-          image: mcr.microsoft.com/oss/kubernetes-csi/azuredisk-csi:v1.31.1
+          image: mcr.microsoft.com/oss/kubernetes-csi/azuredisk-csi:v1.31.2
           imagePullPolicy: IfNotPresent
           args:
             - "--v=5"
diff --git a/deploy/csi-azuredisk-node-windows-hostprocess.yaml b/deploy/csi-azuredisk-node-windows-hostprocess.yaml
index 501c86e4fe..4725c5dda6 100644
--- a/deploy/csi-azuredisk-node-windows-hostprocess.yaml
+++ b/deploy/csi-azuredisk-node-windows-hostprocess.yaml
@@ -41,7 +41,7 @@ spec:
       hostNetwork: true
       initContainers:
         - name: init
-          image: mcr.microsoft.com/oss/kubernetes-csi/azuredisk-csi:v1.31.1-windows-hp
+          image: mcr.microsoft.com/oss/kubernetes-csi/azuredisk-csi:v1.31.2-windows-hp
           imagePullPolicy: IfNotPresent
           command:
             - "powershell.exe"
@@ -84,7 +84,7 @@ spec:
               drop:
                 - ALL
         - name: azuredisk
-          image: mcr.microsoft.com/oss/kubernetes-csi/azuredisk-csi:v1.31.1-windows-hp
+          image: mcr.microsoft.com/oss/kubernetes-csi/azuredisk-csi:v1.31.2-windows-hp
           imagePullPolicy: IfNotPresent
           command:
             - "azurediskplugin.exe"
diff --git a/deploy/csi-azuredisk-node-windows.yaml b/deploy/csi-azuredisk-node-windows.yaml
index ba16872d55..35e55225f2 100644
--- a/deploy/csi-azuredisk-node-windows.yaml
+++ b/deploy/csi-azuredisk-node-windows.yaml
@@ -94,7 +94,7 @@ spec:
               drop:
                 - ALL
         - name: azuredisk
-          image: mcr.microsoft.com/oss/kubernetes-csi/azuredisk-csi:v1.31.1
+          image: mcr.microsoft.com/oss/kubernetes-csi/azuredisk-csi:v1.31.2
           imagePullPolicy: IfNotPresent
           args:
             - "--v=5"
diff --git a/deploy/csi-azuredisk-node.yaml b/deploy/csi-azuredisk-node.yaml
index c539eb28be..f62f53f50f 100644
--- a/deploy/csi-azuredisk-node.yaml
+++ b/deploy/csi-azuredisk-node.yaml
@@ -85,7 +85,7 @@ spec:
               drop:
                 - ALL
         - name: azuredisk
-          image: mcr.microsoft.com/oss/kubernetes-csi/azuredisk-csi:v1.31.1
+          image: mcr.microsoft.com/oss/kubernetes-csi/azuredisk-csi:v1.31.2
           imagePullPolicy: IfNotPresent
           args:
             - "--v=5"
diff --git a/deploy/v1.31.2/crd-csi-snapshot.yaml b/deploy/v1.31.2/crd-csi-snapshot.yaml
new file mode 100644
index 0000000000..d4b90b266d
--- /dev/null
+++ b/deploy/v1.31.2/crd-csi-snapshot.yaml
@@ -0,0 +1,838 @@
+---
+apiVersion: apiextensions.k8s.io/v1
+kind: CustomResourceDefinition
+metadata:
+  annotations:
+    controller-gen.kubebuilder.io/version: v0.8.0
+    api-approved.kubernetes.io: "https://github.com/kubernetes-csi/external-snapshotter/pull/665"
+  creationTimestamp: null
+  name: volumesnapshots.snapshot.storage.k8s.io
+spec:
+  group: snapshot.storage.k8s.io
+  names:
+    kind: VolumeSnapshot
+    listKind: VolumeSnapshotList
+    plural: volumesnapshots
+    shortNames:
+    - vs
+    singular: volumesnapshot
+  scope: Namespaced
+  versions:
+  - additionalPrinterColumns:
+    - description: Indicates if the snapshot is ready to be used to restore a volume.
+      jsonPath: .status.readyToUse
+      name: ReadyToUse
+      type: boolean
+    - description: If a new snapshot needs to be created, this contains the name of
+        the source PVC from which this snapshot was (or will be) created.
+      jsonPath: .spec.source.persistentVolumeClaimName
+      name: SourcePVC
+      type: string
+    - description: If a snapshot already exists, this contains the name of the existing
+        VolumeSnapshotContent object representing the existing snapshot.
+      jsonPath: .spec.source.volumeSnapshotContentName
+      name: SourceSnapshotContent
+      type: string
+    - description: Represents the minimum size of volume required to rehydrate from
+        this snapshot.
+      jsonPath: .status.restoreSize
+      name: RestoreSize
+      type: string
+    - description: The name of the VolumeSnapshotClass requested by the VolumeSnapshot.
+      jsonPath: .spec.volumeSnapshotClassName
+      name: SnapshotClass
+      type: string
+    - description: Name of the VolumeSnapshotContent object to which the VolumeSnapshot
+        object intends to bind to. Please note that verification of binding actually
+        requires checking both VolumeSnapshot and VolumeSnapshotContent to ensure
+        both are pointing at each other. Binding MUST be verified prior to usage of
+        this object.
+      jsonPath: .status.boundVolumeSnapshotContentName
+      name: SnapshotContent
+      type: string
+    - description: Timestamp when the point-in-time snapshot was taken by the underlying
+        storage system.
+      jsonPath: .status.creationTime
+      name: CreationTime
+      type: date
+    - jsonPath: .metadata.creationTimestamp
+      name: Age
+      type: date
+    name: v1
+    schema:
+      openAPIV3Schema:
+        description: VolumeSnapshot is a user's request for either creating a point-in-time
+          snapshot of a persistent volume, or binding to a pre-existing snapshot.
+        properties:
+          apiVersion:
+            description: 'APIVersion defines the versioned schema of this representation
+              of an object. Servers should convert recognized schemas to the latest
+              internal value, and may reject unrecognized values. More info: https://git.k8s.io/community/contributors/devel/sig-architecture/api-conventions.md#resources'
+            type: string
+          kind:
+            description: 'Kind is a string value representing the REST resource this
+              object represents. Servers may infer this from the endpoint the client
+              submits requests to. Cannot be updated. In CamelCase. More info: https://git.k8s.io/community/contributors/devel/sig-architecture/api-conventions.md#types-kinds'
+            type: string
+          spec:
+            description: 'spec defines the desired characteristics of a snapshot requested
+              by a user. More info: https://kubernetes.io/docs/concepts/storage/volume-snapshots#volumesnapshots
+              Required.'
+            properties:
+              source:
+                description: source specifies where a snapshot will be created from.
+                  This field is immutable after creation. Required.
+                properties:
+                  persistentVolumeClaimName:
+                    description: persistentVolumeClaimName specifies the name of the
+                      PersistentVolumeClaim object representing the volume from which
+                      a snapshot should be created. This PVC is assumed to be in the
+                      same namespace as the VolumeSnapshot object. This field should
+                      be set if the snapshot does not exists, and needs to be created.
+                      This field is immutable.
+                    type: string
+                  volumeSnapshotContentName:
+                    description: volumeSnapshotContentName specifies the name of a
+                      pre-existing VolumeSnapshotContent object representing an existing
+                      volume snapshot. This field should be set if the snapshot already
+                      exists and only needs a representation in Kubernetes. This field
+                      is immutable.
+                    type: string
+                type: object
+                oneOf:
+                - required: ["persistentVolumeClaimName"]
+                - required: ["volumeSnapshotContentName"]
+              volumeSnapshotClassName:
+                description: 'VolumeSnapshotClassName is the name of the VolumeSnapshotClass
+                  requested by the VolumeSnapshot. VolumeSnapshotClassName may be
+                  left nil to indicate that the default SnapshotClass should be used.
+                  A given cluster may have multiple default Volume SnapshotClasses:
+                  one default per CSI Driver. If a VolumeSnapshot does not specify
+                  a SnapshotClass, VolumeSnapshotSource will be checked to figure
+                  out what the associated CSI Driver is, and the default VolumeSnapshotClass
+                  associated with that CSI Driver will be used. If more than one VolumeSnapshotClass
+                  exist for a given CSI Driver and more than one have been marked
+                  as default, CreateSnapshot will fail and generate an event. Empty
+                  string is not allowed for this field.'
+                type: string
+            required:
+            - source
+            type: object
+          status:
+            description: status represents the current information of a snapshot.
+              Consumers must verify binding between VolumeSnapshot and VolumeSnapshotContent
+              objects is successful (by validating that both VolumeSnapshot and VolumeSnapshotContent
+              point at each other) before using this object.
+            properties:
+              boundVolumeSnapshotContentName:
+                description: 'boundVolumeSnapshotContentName is the name of the VolumeSnapshotContent
+                  object to which this VolumeSnapshot object intends to bind to. If
+                  not specified, it indicates that the VolumeSnapshot object has not
+                  been successfully bound to a VolumeSnapshotContent object yet. NOTE:
+                  To avoid possible security issues, consumers must verify binding
+                  between VolumeSnapshot and VolumeSnapshotContent objects is successful
+                  (by validating that both VolumeSnapshot and VolumeSnapshotContent
+                  point at each other) before using this object.'
+                type: string
+              creationTime:
+                description: creationTime is the timestamp when the point-in-time
+                  snapshot is taken by the underlying storage system. In dynamic snapshot
+                  creation case, this field will be filled in by the snapshot controller
+                  with the "creation_time" value returned from CSI "CreateSnapshot"
+                  gRPC call. For a pre-existing snapshot, this field will be filled
+                  with the "creation_time" value returned from the CSI "ListSnapshots"
+                  gRPC call if the driver supports it. If not specified, it may indicate
+                  that the creation time of the snapshot is unknown.
+                format: date-time
+                type: string
+              error:
+                description: error is the last observed error during snapshot creation,
+                  if any. This field could be helpful to upper level controllers(i.e.,
+                  application controller) to decide whether they should continue on
+                  waiting for the snapshot to be created based on the type of error
+                  reported. The snapshot controller will keep retrying when an error
+                  occurs during the snapshot creation. Upon success, this error field
+                  will be cleared.
+                properties:
+                  message:
+                    description: 'message is a string detailing the encountered error
+                      during snapshot creation if specified. NOTE: message may be
+                      logged, and it should not contain sensitive information.'
+                    type: string
+                  time:
+                    description: time is the timestamp when the error was encountered.
+                    format: date-time
+                    type: string
+                type: object
+              readyToUse:
+                description: readyToUse indicates if the snapshot is ready to be used
+                  to restore a volume. In dynamic snapshot creation case, this field
+                  will be filled in by the snapshot controller with the "ready_to_use"
+                  value returned from CSI "CreateSnapshot" gRPC call. For a pre-existing
+                  snapshot, this field will be filled with the "ready_to_use" value
+                  returned from the CSI "ListSnapshots" gRPC call if the driver supports
+                  it, otherwise, this field will be set to "True". If not specified,
+                  it means the readiness of a snapshot is unknown.
+                type: boolean
+              restoreSize:
+                type: string
+                description: restoreSize represents the minimum size of volume required
+                  to create a volume from this snapshot. In dynamic snapshot creation
+                  case, this field will be filled in by the snapshot controller with
+                  the "size_bytes" value returned from CSI "CreateSnapshot" gRPC call.
+                  For a pre-existing snapshot, this field will be filled with the
+                  "size_bytes" value returned from the CSI "ListSnapshots" gRPC call
+                  if the driver supports it. When restoring a volume from this snapshot,
+                  the size of the volume MUST NOT be smaller than the restoreSize
+                  if it is specified, otherwise the restoration will fail. If not
+                  specified, it indicates that the size is unknown.
+                pattern: ^(\+|-)?(([0-9]+(\.[0-9]*)?)|(\.[0-9]+))(([KMGTPE]i)|[numkMGTPE]|([eE](\+|-)?(([0-9]+(\.[0-9]*)?)|(\.[0-9]+))))?$
+                x-kubernetes-int-or-string: true
+            type: object
+        required:
+        - spec
+        type: object
+    served: true
+    storage: true
+    subresources:
+      status: {}
+  - additionalPrinterColumns:
+    - description: Indicates if the snapshot is ready to be used to restore a volume.
+      jsonPath: .status.readyToUse
+      name: ReadyToUse
+      type: boolean
+    - description: If a new snapshot needs to be created, this contains the name of the source PVC from which this snapshot was (or will be) created.
+      jsonPath: .spec.source.persistentVolumeClaimName
+      name: SourcePVC
+      type: string
+    - description: If a snapshot already exists, this contains the name of the existing VolumeSnapshotContent object representing the existing snapshot.
+      jsonPath: .spec.source.volumeSnapshotContentName
+      name: SourceSnapshotContent
+      type: string
+    - description: Represents the minimum size of volume required to rehydrate from this snapshot.
+      jsonPath: .status.restoreSize
+      name: RestoreSize
+      type: string
+    - description: The name of the VolumeSnapshotClass requested by the VolumeSnapshot.
+      jsonPath: .spec.volumeSnapshotClassName
+      name: SnapshotClass
+      type: string
+    - description: Name of the VolumeSnapshotContent object to which the VolumeSnapshot object intends to bind to. Please note that verification of binding actually requires checking both VolumeSnapshot and VolumeSnapshotContent to ensure both are pointing at each other. Binding MUST be verified prior to usage of this object.
+      jsonPath: .status.boundVolumeSnapshotContentName
+      name: SnapshotContent
+      type: string
+    - description: Timestamp when the point-in-time snapshot was taken by the underlying storage system.
+      jsonPath: .status.creationTime
+      name: CreationTime
+      type: date
+    - jsonPath: .metadata.creationTimestamp
+      name: Age
+      type: date
+    name: v1beta1
+    # This indicates the v1beta1 version of the custom resource is deprecated.
+    # API requests to this version receive a warning in the server response.
+    deprecated: true
+    # This overrides the default warning returned to clients making v1beta1 API requests.
+    deprecationWarning: "snapshot.storage.k8s.io/v1beta1 VolumeSnapshot is deprecated; use snapshot.storage.k8s.io/v1 VolumeSnapshot"
+    schema:
+      openAPIV3Schema:
+        description: VolumeSnapshot is a user's request for either creating a point-in-time snapshot of a persistent volume, or binding to a pre-existing snapshot.
+        properties:
+          apiVersion:
+            description: 'APIVersion defines the versioned schema of this representation of an object. Servers should convert recognized schemas to the latest internal value, and may reject unrecognized values. More info: https://git.k8s.io/community/contributors/devel/sig-architecture/api-conventions.md#resources'
+            type: string
+          kind:
+            description: 'Kind is a string value representing the REST resource this object represents. Servers may infer this from the endpoint the client submits requests to. Cannot be updated. In CamelCase. More info: https://git.k8s.io/community/contributors/devel/sig-architecture/api-conventions.md#types-kinds'
+            type: string
+          spec:
+            description: 'spec defines the desired characteristics of a snapshot requested by a user. More info: https://kubernetes.io/docs/concepts/storage/volume-snapshots#volumesnapshots Required.'
+            properties:
+              source:
+                description: source specifies where a snapshot will be created from. This field is immutable after creation. Required.
+                properties:
+                  persistentVolumeClaimName:
+                    description: persistentVolumeClaimName specifies the name of the PersistentVolumeClaim object representing the volume from which a snapshot should be created. This PVC is assumed to be in the same namespace as the VolumeSnapshot object. This field should be set if the snapshot does not exists, and needs to be created. This field is immutable.
+                    type: string
+                  volumeSnapshotContentName:
+                    description: volumeSnapshotContentName specifies the name of a pre-existing VolumeSnapshotContent object representing an existing volume snapshot. This field should be set if the snapshot already exists and only needs a representation in Kubernetes. This field is immutable.
+                    type: string
+                type: object
+              volumeSnapshotClassName:
+                description: 'VolumeSnapshotClassName is the name of the VolumeSnapshotClass requested by the VolumeSnapshot. VolumeSnapshotClassName may be left nil to indicate that the default SnapshotClass should be used. A given cluster may have multiple default Volume SnapshotClasses: one default per CSI Driver. If a VolumeSnapshot does not specify a SnapshotClass, VolumeSnapshotSource will be checked to figure out what the associated CSI Driver is, and the default VolumeSnapshotClass associated with that CSI Driver will be used. If more than one VolumeSnapshotClass exist for a given CSI Driver and more than one have been marked as default, CreateSnapshot will fail and generate an event. Empty string is not allowed for this field.'
+                type: string
+            required:
+            - source
+            type: object
+          status:
+            description: status represents the current information of a snapshot. Consumers must verify binding between VolumeSnapshot and VolumeSnapshotContent objects is successful (by validating that both VolumeSnapshot and VolumeSnapshotContent point at each other) before using this object.
+            properties:
+              boundVolumeSnapshotContentName:
+                description: 'boundVolumeSnapshotContentName is the name of the VolumeSnapshotContent object to which this VolumeSnapshot object intends to bind to. If not specified, it indicates that the VolumeSnapshot object has not been successfully bound to a VolumeSnapshotContent object yet. NOTE: To avoid possible security issues, consumers must verify binding between VolumeSnapshot and VolumeSnapshotContent objects is successful (by validating that both VolumeSnapshot and VolumeSnapshotContent point at each other) before using this object.'
+                type: string
+              creationTime:
+                description: creationTime is the timestamp when the point-in-time snapshot is taken by the underlying storage system. In dynamic snapshot creation case, this field will be filled in by the snapshot controller with the "creation_time" value returned from CSI "CreateSnapshot" gRPC call. For a pre-existing snapshot, this field will be filled with the "creation_time" value returned from the CSI "ListSnapshots" gRPC call if the driver supports it. If not specified, it may indicate that the creation time of the snapshot is unknown.
+                format: date-time
+                type: string
+              error:
+                description: error is the last observed error during snapshot creation, if any. This field could be helpful to upper level controllers(i.e., application controller) to decide whether they should continue on waiting for the snapshot to be created based on the type of error reported. The snapshot controller will keep retrying when an error occurs during the snapshot creation. Upon success, this error field will be cleared.
+                properties:
+                  message:
+                    description: 'message is a string detailing the encountered error during snapshot creation if specified. NOTE: message may be logged, and it should not contain sensitive information.'
+                    type: string
+                  time:
+                    description: time is the timestamp when the error was encountered.
+                    format: date-time
+                    type: string
+                type: object
+              readyToUse:
+                description: readyToUse indicates if the snapshot is ready to be used to restore a volume. In dynamic snapshot creation case, this field will be filled in by the snapshot controller with the "ready_to_use" value returned from CSI "CreateSnapshot" gRPC call. For a pre-existing snapshot, this field will be filled with the "ready_to_use" value returned from the CSI "ListSnapshots" gRPC call if the driver supports it, otherwise, this field will be set to "True". If not specified, it means the readiness of a snapshot is unknown.
+                type: boolean
+              restoreSize:
+                type: string
+                description: restoreSize represents the minimum size of volume required to create a volume from this snapshot. In dynamic snapshot creation case, this field will be filled in by the snapshot controller with the "size_bytes" value returned from CSI "CreateSnapshot" gRPC call. For a pre-existing snapshot, this field will be filled with the "size_bytes" value returned from the CSI "ListSnapshots" gRPC call if the driver supports it. When restoring a volume from this snapshot, the size of the volume MUST NOT be smaller than the restoreSize if it is specified, otherwise the restoration will fail. If not specified, it indicates that the size is unknown.
+                pattern: ^(\+|-)?(([0-9]+(\.[0-9]*)?)|(\.[0-9]+))(([KMGTPE]i)|[numkMGTPE]|([eE](\+|-)?(([0-9]+(\.[0-9]*)?)|(\.[0-9]+))))?$
+                x-kubernetes-int-or-string: true
+            type: object
+        required:
+        - spec
+        type: object
+    served: false
+    storage: false
+    subresources:
+      status: {}
+status:
+  acceptedNames:
+    kind: ""
+    plural: ""
+  conditions: []
+  storedVersions: []
+---
+apiVersion: apiextensions.k8s.io/v1
+kind: CustomResourceDefinition
+metadata:
+  annotations:
+    controller-gen.kubebuilder.io/version: v0.8.0
+    api-approved.kubernetes.io: "https://github.com/kubernetes-csi/external-snapshotter/pull/665"
+  creationTimestamp: null
+  name: volumesnapshotclasses.snapshot.storage.k8s.io
+spec:
+  group: snapshot.storage.k8s.io
+  names:
+    kind: VolumeSnapshotClass
+    listKind: VolumeSnapshotClassList
+    plural: volumesnapshotclasses
+    shortNames:
+    - vsclass
+    - vsclasses
+    singular: volumesnapshotclass
+  scope: Cluster
+  versions:
+  - additionalPrinterColumns:
+    - jsonPath: .driver
+      name: Driver
+      type: string
+    - description: Determines whether a VolumeSnapshotContent created through the
+        VolumeSnapshotClass should be deleted when its bound VolumeSnapshot is deleted.
+      jsonPath: .deletionPolicy
+      name: DeletionPolicy
+      type: string
+    - jsonPath: .metadata.creationTimestamp
+      name: Age
+      type: date
+    name: v1
+    schema:
+      openAPIV3Schema:
+        description: VolumeSnapshotClass specifies parameters that a underlying storage
+          system uses when creating a volume snapshot. A specific VolumeSnapshotClass
+          is used by specifying its name in a VolumeSnapshot object. VolumeSnapshotClasses
+          are non-namespaced
+        properties:
+          apiVersion:
+            description: 'APIVersion defines the versioned schema of this representation
+              of an object. Servers should convert recognized schemas to the latest
+              internal value, and may reject unrecognized values. More info: https://git.k8s.io/community/contributors/devel/sig-architecture/api-conventions.md#resources'
+            type: string
+          deletionPolicy:
+            description: deletionPolicy determines whether a VolumeSnapshotContent
+              created through the VolumeSnapshotClass should be deleted when its bound
+              VolumeSnapshot is deleted. Supported values are "Retain" and "Delete".
+              "Retain" means that the VolumeSnapshotContent and its physical snapshot
+              on underlying storage system are kept. "Delete" means that the VolumeSnapshotContent
+              and its physical snapshot on underlying storage system are deleted.
+              Required.
+            enum:
+            - Delete
+            - Retain
+            type: string
+          driver:
+            description: driver is the name of the storage driver that handles this
+              VolumeSnapshotClass. Required.
+            type: string
+          kind:
+            description: 'Kind is a string value representing the REST resource this
+              object represents. Servers may infer this from the endpoint the client
+              submits requests to. Cannot be updated. In CamelCase. More info: https://git.k8s.io/community/contributors/devel/sig-architecture/api-conventions.md#types-kinds'
+            type: string
+          parameters:
+            additionalProperties:
+              type: string
+            description: parameters is a key-value map with storage driver specific
+              parameters for creating snapshots. These values are opaque to Kubernetes.
+            type: object
+        required:
+        - deletionPolicy
+        - driver
+        type: object
+    served: true
+    storage: true
+    subresources: {}
+  - additionalPrinterColumns:
+    - jsonPath: .driver
+      name: Driver
+      type: string
+    - description: Determines whether a VolumeSnapshotContent created through the VolumeSnapshotClass should be deleted when its bound VolumeSnapshot is deleted.
+      jsonPath: .deletionPolicy
+      name: DeletionPolicy
+      type: string
+    - jsonPath: .metadata.creationTimestamp
+      name: Age
+      type: date
+    name: v1beta1
+    # This indicates the v1beta1 version of the custom resource is deprecated.
+    # API requests to this version receive a warning in the server response.
+    deprecated: true
+    # This overrides the default warning returned to clients making v1beta1 API requests.
+    deprecationWarning: "snapshot.storage.k8s.io/v1beta1 VolumeSnapshotClass is deprecated; use snapshot.storage.k8s.io/v1 VolumeSnapshotClass"
+    schema:
+      openAPIV3Schema:
+        description: VolumeSnapshotClass specifies parameters that a underlying storage system uses when creating a volume snapshot. A specific VolumeSnapshotClass is used by specifying its name in a VolumeSnapshot object. VolumeSnapshotClasses are non-namespaced
+        properties:
+          apiVersion:
+            description: 'APIVersion defines the versioned schema of this representation of an object. Servers should convert recognized schemas to the latest internal value, and may reject unrecognized values. More info: https://git.k8s.io/community/contributors/devel/sig-architecture/api-conventions.md#resources'
+            type: string
+          deletionPolicy:
+            description: deletionPolicy determines whether a VolumeSnapshotContent created through the VolumeSnapshotClass should be deleted when its bound VolumeSnapshot is deleted. Supported values are "Retain" and "Delete". "Retain" means that the VolumeSnapshotContent and its physical snapshot on underlying storage system are kept. "Delete" means that the VolumeSnapshotContent and its physical snapshot on underlying storage system are deleted. Required.
+            enum:
+            - Delete
+            - Retain
+            type: string
+          driver:
+            description: driver is the name of the storage driver that handles this VolumeSnapshotClass. Required.
+            type: string
+          kind:
+            description: 'Kind is a string value representing the REST resource this object represents. Servers may infer this from the endpoint the client submits requests to. Cannot be updated. In CamelCase. More info: https://git.k8s.io/community/contributors/devel/sig-architecture/api-conventions.md#types-kinds'
+            type: string
+          parameters:
+            additionalProperties:
+              type: string
+            description: parameters is a key-value map with storage driver specific parameters for creating snapshots. These values are opaque to Kubernetes.
+            type: object
+        required:
+        - deletionPolicy
+        - driver
+        type: object
+    served: false
+    storage: false
+    subresources: {}
+status:
+  acceptedNames:
+    kind: ""
+    plural: ""
+  conditions: []
+  storedVersions: []
+---
+apiVersion: apiextensions.k8s.io/v1
+kind: CustomResourceDefinition
+metadata:
+  annotations:
+    controller-gen.kubebuilder.io/version: v0.8.0
+    api-approved.kubernetes.io: "https://github.com/kubernetes-csi/external-snapshotter/pull/665"
+  creationTimestamp: null
+  name: volumesnapshotcontents.snapshot.storage.k8s.io
+spec:
+  group: snapshot.storage.k8s.io
+  names:
+    kind: VolumeSnapshotContent
+    listKind: VolumeSnapshotContentList
+    plural: volumesnapshotcontents
+    shortNames:
+    - vsc
+    - vscs
+    singular: volumesnapshotcontent
+  scope: Cluster
+  versions:
+  - additionalPrinterColumns:
+    - description: Indicates if the snapshot is ready to be used to restore a volume.
+      jsonPath: .status.readyToUse
+      name: ReadyToUse
+      type: boolean
+    - description: Represents the complete size of the snapshot in bytes
+      jsonPath: .status.restoreSize
+      name: RestoreSize
+      type: integer
+    - description: Determines whether this VolumeSnapshotContent and its physical
+        snapshot on the underlying storage system should be deleted when its bound
+        VolumeSnapshot is deleted.
+      jsonPath: .spec.deletionPolicy
+      name: DeletionPolicy
+      type: string
+    - description: Name of the CSI driver used to create the physical snapshot on
+        the underlying storage system.
+      jsonPath: .spec.driver
+      name: Driver
+      type: string
+    - description: Name of the VolumeSnapshotClass to which this snapshot belongs.
+      jsonPath: .spec.volumeSnapshotClassName
+      name: VolumeSnapshotClass
+      type: string
+    - description: Name of the VolumeSnapshot object to which this VolumeSnapshotContent
+        object is bound.
+      jsonPath: .spec.volumeSnapshotRef.name
+      name: VolumeSnapshot
+      type: string
+    - description: Namespace of the VolumeSnapshot object to which this VolumeSnapshotContent object is bound.
+      jsonPath: .spec.volumeSnapshotRef.namespace
+      name: VolumeSnapshotNamespace
+      type: string
+    - jsonPath: .metadata.creationTimestamp
+      name: Age
+      type: date
+    name: v1
+    schema:
+      openAPIV3Schema:
+        description: VolumeSnapshotContent represents the actual "on-disk" snapshot
+          object in the underlying storage system
+        properties:
+          apiVersion:
+            description: 'APIVersion defines the versioned schema of this representation
+              of an object. Servers should convert recognized schemas to the latest
+              internal value, and may reject unrecognized values. More info: https://git.k8s.io/community/contributors/devel/sig-architecture/api-conventions.md#resources'
+            type: string
+          kind:
+            description: 'Kind is a string value representing the REST resource this
+              object represents. Servers may infer this from the endpoint the client
+              submits requests to. Cannot be updated. In CamelCase. More info: https://git.k8s.io/community/contributors/devel/sig-architecture/api-conventions.md#types-kinds'
+            type: string
+          spec:
+            description: spec defines properties of a VolumeSnapshotContent created
+              by the underlying storage system. Required.
+            properties:
+              deletionPolicy:
+                description: deletionPolicy determines whether this VolumeSnapshotContent
+                  and its physical snapshot on the underlying storage system should
+                  be deleted when its bound VolumeSnapshot is deleted. Supported values
+                  are "Retain" and "Delete". "Retain" means that the VolumeSnapshotContent
+                  and its physical snapshot on underlying storage system are kept.
+                  "Delete" means that the VolumeSnapshotContent and its physical snapshot
+                  on underlying storage system are deleted. For dynamically provisioned
+                  snapshots, this field will automatically be filled in by the CSI
+                  snapshotter sidecar with the "DeletionPolicy" field defined in the
+                  corresponding VolumeSnapshotClass. For pre-existing snapshots, users
+                  MUST specify this field when creating the VolumeSnapshotContent
+                  object. Required.
+                enum:
+                - Delete
+                - Retain
+                type: string
+              driver:
+                description: driver is the name of the CSI driver used to create the
+                  physical snapshot on the underlying storage system. This MUST be
+                  the same as the name returned by the CSI GetPluginName() call for
+                  that driver. Required.
+                type: string
+              source:
+                description: source specifies whether the snapshot is (or should be)
+                  dynamically provisioned or already exists, and just requires a Kubernetes
+                  object representation. This field is immutable after creation. Required.
+                properties:
+                  snapshotHandle:
+                    description: snapshotHandle specifies the CSI "snapshot_id" of
+                      a pre-existing snapshot on the underlying storage system for
+                      which a Kubernetes object representation was (or should be)
+                      created. This field is immutable.
+                    type: string
+                  volumeHandle:
+                    description: volumeHandle specifies the CSI "volume_id" of the
+                      volume from which a snapshot should be dynamically taken from.
+                      This field is immutable.
+                    type: string
+                type: object
+                oneOf:
+                - required: ["snapshotHandle"]
+                - required: ["volumeHandle"]
+              sourceVolumeMode:
+                description: SourceVolumeMode is the mode of the volume whose snapshot
+                  is taken. Can be either “Filesystem” or “Block”. If not specified,
+                  it indicates the source volume's mode is unknown. This field is
+                  immutable. This field is an alpha field.
+                type: string
+              volumeSnapshotClassName:
+                description: name of the VolumeSnapshotClass from which this snapshot
+                  was (or will be) created. Note that after provisioning, the VolumeSnapshotClass
+                  may be deleted or recreated with different set of values, and as
+                  such, should not be referenced post-snapshot creation.
+                type: string
+              volumeSnapshotRef:
+                description: volumeSnapshotRef specifies the VolumeSnapshot object
+                  to which this VolumeSnapshotContent object is bound. VolumeSnapshot.Spec.VolumeSnapshotContentName
+                  field must reference to this VolumeSnapshotContent's name for the
+                  bidirectional binding to be valid. For a pre-existing VolumeSnapshotContent
+                  object, name and namespace of the VolumeSnapshot object MUST be
+                  provided for binding to happen. This field is immutable after creation.
+                  Required.
+                properties:
+                  apiVersion:
+                    description: API version of the referent.
+                    type: string
+                  fieldPath:
+                    description: 'If referring to a piece of an object instead of
+                      an entire object, this string should contain a valid JSON/Go
+                      field access statement, such as desiredState.manifest.containers[2].
+                      For example, if the object reference is to a container within
+                      a pod, this would take on a value like: "spec.containers{name}"
+                      (where "name" refers to the name of the container that triggered
+                      the event) or if no container name is specified "spec.containers[2]"
+                      (container with index 2 in this pod). This syntax is chosen
+                      only to have some well-defined way of referencing a part of
+                      an object. TODO: this design is not final and this field is
+                      subject to change in the future.'
+                    type: string
+                  kind:
+                    description: 'Kind of the referent. More info: https://git.k8s.io/community/contributors/devel/sig-architecture/api-conventions.md#types-kinds'
+                    type: string
+                  name:
+                    description: 'Name of the referent. More info: https://kubernetes.io/docs/concepts/overview/working-with-objects/names/#names'
+                    type: string
+                  namespace:
+                    description: 'Namespace of the referent. More info: https://kubernetes.io/docs/concepts/overview/working-with-objects/namespaces/'
+                    type: string
+                  resourceVersion:
+                    description: 'Specific resourceVersion to which this reference
+                      is made, if any. More info: https://git.k8s.io/community/contributors/devel/sig-architecture/api-conventions.md#concurrency-control-and-consistency'
+                    type: string
+                  uid:
+                    description: 'UID of the referent. More info: https://kubernetes.io/docs/concepts/overview/working-with-objects/names/#uids'
+                    type: string
+                type: object
+            required:
+            - deletionPolicy
+            - driver
+            - source
+            - volumeSnapshotRef
+            type: object
+          status:
+            description: status represents the current information of a snapshot.
+            properties:
+              creationTime:
+                description: creationTime is the timestamp when the point-in-time
+                  snapshot is taken by the underlying storage system. In dynamic snapshot
+                  creation case, this field will be filled in by the CSI snapshotter
+                  sidecar with the "creation_time" value returned from CSI "CreateSnapshot"
+                  gRPC call. For a pre-existing snapshot, this field will be filled
+                  with the "creation_time" value returned from the CSI "ListSnapshots"
+                  gRPC call if the driver supports it. If not specified, it indicates
+                  the creation time is unknown. The format of this field is a Unix
+                  nanoseconds time encoded as an int64. On Unix, the command `date
+                  +%s%N` returns the current time in nanoseconds since 1970-01-01
+                  00:00:00 UTC.
+                format: int64
+                type: integer
+              error:
+                description: error is the last observed error during snapshot creation,
+                  if any. Upon success after retry, this error field will be cleared.
+                properties:
+                  message:
+                    description: 'message is a string detailing the encountered error
+                      during snapshot creation if specified. NOTE: message may be
+                      logged, and it should not contain sensitive information.'
+                    type: string
+                  time:
+                    description: time is the timestamp when the error was encountered.
+                    format: date-time
+                    type: string
+                type: object
+              readyToUse:
+                description: readyToUse indicates if a snapshot is ready to be used
+                  to restore a volume. In dynamic snapshot creation case, this field
+                  will be filled in by the CSI snapshotter sidecar with the "ready_to_use"
+                  value returned from CSI "CreateSnapshot" gRPC call. For a pre-existing
+                  snapshot, this field will be filled with the "ready_to_use" value
+                  returned from the CSI "ListSnapshots" gRPC call if the driver supports
+                  it, otherwise, this field will be set to "True". If not specified,
+                  it means the readiness of a snapshot is unknown.
+                type: boolean
+              restoreSize:
+                description: restoreSize represents the complete size of the snapshot
+                  in bytes. In dynamic snapshot creation case, this field will be
+                  filled in by the CSI snapshotter sidecar with the "size_bytes" value
+                  returned from CSI "CreateSnapshot" gRPC call. For a pre-existing
+                  snapshot, this field will be filled with the "size_bytes" value
+                  returned from the CSI "ListSnapshots" gRPC call if the driver supports
+                  it. When restoring a volume from this snapshot, the size of the
+                  volume MUST NOT be smaller than the restoreSize if it is specified,
+                  otherwise the restoration will fail. If not specified, it indicates
+                  that the size is unknown.
+                format: int64
+                minimum: 0
+                type: integer
+              snapshotHandle:
+                description: snapshotHandle is the CSI "snapshot_id" of a snapshot
+                  on the underlying storage system. If not specified, it indicates
+                  that dynamic snapshot creation has either failed or it is still
+                  in progress.
+                type: string
+            type: object
+        required:
+        - spec
+        type: object
+    served: true
+    storage: true
+    subresources:
+      status: {}
+  - additionalPrinterColumns:
+    - description: Indicates if the snapshot is ready to be used to restore a volume.
+      jsonPath: .status.readyToUse
+      name: ReadyToUse
+      type: boolean
+    - description: Represents the complete size of the snapshot in bytes
+      jsonPath: .status.restoreSize
+      name: RestoreSize
+      type: integer
+    - description: Determines whether this VolumeSnapshotContent and its physical snapshot on the underlying storage system should be deleted when its bound VolumeSnapshot is deleted.
+      jsonPath: .spec.deletionPolicy
+      name: DeletionPolicy
+      type: string
+    - description: Name of the CSI driver used to create the physical snapshot on the underlying storage system.
+      jsonPath: .spec.driver
+      name: Driver
+      type: string
+    - description: Name of the VolumeSnapshotClass to which this snapshot belongs.
+      jsonPath: .spec.volumeSnapshotClassName
+      name: VolumeSnapshotClass
+      type: string
+    - description: Name of the VolumeSnapshot object to which this VolumeSnapshotContent object is bound.
+      jsonPath: .spec.volumeSnapshotRef.name
+      name: VolumeSnapshot
+      type: string
+    - description: Namespace of the VolumeSnapshot object to which this VolumeSnapshotContent object is bound.
+      jsonPath: .spec.volumeSnapshotRef.namespace
+      name: VolumeSnapshotNamespace
+      type: string
+    - jsonPath: .metadata.creationTimestamp
+      name: Age
+      type: date
+    name: v1beta1
+    # This indicates the v1beta1 version of the custom resource is deprecated.
+    # API requests to this version receive a warning in the server response.
+    deprecated: true
+    # This overrides the default warning returned to clients making v1beta1 API requests.
+    deprecationWarning: "snapshot.storage.k8s.io/v1beta1 VolumeSnapshotContent is deprecated; use snapshot.storage.k8s.io/v1 VolumeSnapshotContent"
+    schema:
+      openAPIV3Schema:
+        description: VolumeSnapshotContent represents the actual "on-disk" snapshot object in the underlying storage system
+        properties:
+          apiVersion:
+            description: 'APIVersion defines the versioned schema of this representation of an object. Servers should convert recognized schemas to the latest internal value, and may reject unrecognized values. More info: https://git.k8s.io/community/contributors/devel/sig-architecture/api-conventions.md#resources'
+            type: string
+          kind:
+            description: 'Kind is a string value representing the REST resource this object represents. Servers may infer this from the endpoint the client submits requests to. Cannot be updated. In CamelCase. More info: https://git.k8s.io/community/contributors/devel/sig-architecture/api-conventions.md#types-kinds'
+            type: string
+          spec:
+            description: spec defines properties of a VolumeSnapshotContent created by the underlying storage system. Required.
+            properties:
+              deletionPolicy:
+                description: deletionPolicy determines whether this VolumeSnapshotContent and its physical snapshot on the underlying storage system should be deleted when its bound VolumeSnapshot is deleted. Supported values are "Retain" and "Delete". "Retain" means that the VolumeSnapshotContent and its physical snapshot on underlying storage system are kept. "Delete" means that the VolumeSnapshotContent and its physical snapshot on underlying storage system are deleted. For dynamically provisioned snapshots, this field will automatically be filled in by the CSI snapshotter sidecar with the "DeletionPolicy" field defined in the corresponding VolumeSnapshotClass. For pre-existing snapshots, users MUST specify this field when creating the  VolumeSnapshotContent object. Required.
+                enum:
+                - Delete
+                - Retain
+                type: string
+              driver:
+                description: driver is the name of the CSI driver used to create the physical snapshot on the underlying storage system. This MUST be the same as the name returned by the CSI GetPluginName() call for that driver. Required.
+                type: string
+              source:
+                description: source specifies whether the snapshot is (or should be) dynamically provisioned or already exists, and just requires a Kubernetes object representation. This field is immutable after creation. Required.
+                properties:
+                  snapshotHandle:
+                    description: snapshotHandle specifies the CSI "snapshot_id" of a pre-existing snapshot on the underlying storage system for which a Kubernetes object representation was (or should be) created. This field is immutable.
+                    type: string
+                  volumeHandle:
+                    description: volumeHandle specifies the CSI "volume_id" of the volume from which a snapshot should be dynamically taken from. This field is immutable.
+                    type: string
+                type: object
+              volumeSnapshotClassName:
+                description: name of the VolumeSnapshotClass from which this snapshot was (or will be) created. Note that after provisioning, the VolumeSnapshotClass may be deleted or recreated with different set of values, and as such, should not be referenced post-snapshot creation.
+                type: string
+              volumeSnapshotRef:
+                description: volumeSnapshotRef specifies the VolumeSnapshot object to which this VolumeSnapshotContent object is bound. VolumeSnapshot.Spec.VolumeSnapshotContentName field must reference to this VolumeSnapshotContent's name for the bidirectional binding to be valid. For a pre-existing VolumeSnapshotContent object, name and namespace of the VolumeSnapshot object MUST be provided for binding to happen. This field is immutable after creation. Required.
+                properties:
+                  apiVersion:
+                    description: API version of the referent.
+                    type: string
+                  fieldPath:
+                    description: 'If referring to a piece of an object instead of an entire object, this string should contain a valid JSON/Go field access statement, such as desiredState.manifest.containers[2]. For example, if the object reference is to a container within a pod, this would take on a value like: "spec.containers{name}" (where "name" refers to the name of the container that triggered the event) or if no container name is specified "spec.containers[2]" (container with index 2 in this pod). This syntax is chosen only to have some well-defined way of referencing a part of an object. TODO: this design is not final and this field is subject to change in the future.'
+                    type: string
+                  kind:
+                    description: 'Kind of the referent. More info: https://git.k8s.io/community/contributors/devel/sig-architecture/api-conventions.md#types-kinds'
+                    type: string
+                  name:
+                    description: 'Name of the referent. More info: https://kubernetes.io/docs/concepts/overview/working-with-objects/names/#names'
+                    type: string
+                  namespace:
+                    description: 'Namespace of the referent. More info: https://kubernetes.io/docs/concepts/overview/working-with-objects/namespaces/'
+                    type: string
+                  resourceVersion:
+                    description: 'Specific resourceVersion to which this reference is made, if any. More info: https://git.k8s.io/community/contributors/devel/sig-architecture/api-conventions.md#concurrency-control-and-consistency'
+                    type: string
+                  uid:
+                    description: 'UID of the referent. More info: https://kubernetes.io/docs/concepts/overview/working-with-objects/names/#uids'
+                    type: string
+                type: object
+            required:
+            - deletionPolicy
+            - driver
+            - source
+            - volumeSnapshotRef
+            type: object
+          status:
+            description: status represents the current information of a snapshot.
+            properties:
+              creationTime:
+                description: creationTime is the timestamp when the point-in-time snapshot is taken by the underlying storage system. In dynamic snapshot creation case, this field will be filled in by the CSI snapshotter sidecar with the "creation_time" value returned from CSI "CreateSnapshot" gRPC call. For a pre-existing snapshot, this field will be filled with the "creation_time" value returned from the CSI "ListSnapshots" gRPC call if the driver supports it. If not specified, it indicates the creation time is unknown. The format of this field is a Unix nanoseconds time encoded as an int64. On Unix, the command `date +%s%N` returns the current time in nanoseconds since 1970-01-01 00:00:00 UTC.
+                format: int64
+                type: integer
+              error:
+                description: error is the last observed error during snapshot creation, if any. Upon success after retry, this error field will be cleared.
+                properties:
+                  message:
+                    description: 'message is a string detailing the encountered error during snapshot creation if specified. NOTE: message may be logged, and it should not contain sensitive information.'
+                    type: string
+                  time:
+                    description: time is the timestamp when the error was encountered.
+                    format: date-time
+                    type: string
+                type: object
+              readyToUse:
+                description: readyToUse indicates if a snapshot is ready to be used to restore a volume. In dynamic snapshot creation case, this field will be filled in by the CSI snapshotter sidecar with the "ready_to_use" value returned from CSI "CreateSnapshot" gRPC call. For a pre-existing snapshot, this field will be filled with the "ready_to_use" value returned from the CSI "ListSnapshots" gRPC call if the driver supports it, otherwise, this field will be set to "True". If not specified, it means the readiness of a snapshot is unknown.
+                type: boolean
+              restoreSize:
+                description: restoreSize represents the complete size of the snapshot in bytes. In dynamic snapshot creation case, this field will be filled in by the CSI snapshotter sidecar with the "size_bytes" value returned from CSI "CreateSnapshot" gRPC call. For a pre-existing snapshot, this field will be filled with the "size_bytes" value returned from the CSI "ListSnapshots" gRPC call if the driver supports it. When restoring a volume from this snapshot, the size of the volume MUST NOT be smaller than the restoreSize if it is specified, otherwise the restoration will fail. If not specified, it indicates that the size is unknown.
+                format: int64
+                minimum: 0
+                type: integer
+              snapshotHandle:
+                description: snapshotHandle is the CSI "snapshot_id" of a snapshot on the underlying storage system. If not specified, it indicates that dynamic snapshot creation has either failed or it is still in progress.
+                type: string
+            type: object
+        required:
+        - spec
+        type: object
+    served: false
+    storage: false
+    subresources:
+      status: {}
+status:
+  acceptedNames:
+    kind: ""
+    plural: ""
+  conditions: []
+  storedVersions: []
diff --git a/deploy/v1.31.2/csi-azuredisk-controller.yaml b/deploy/v1.31.2/csi-azuredisk-controller.yaml
new file mode 100644
index 0000000000..852d4ccf88
--- /dev/null
+++ b/deploy/v1.31.2/csi-azuredisk-controller.yaml
@@ -0,0 +1,223 @@
+---
+kind: Deployment
+apiVersion: apps/v1
+metadata:
+  name: csi-azuredisk-controller
+  namespace: kube-system
+spec:
+  replicas: 2
+  selector:
+    matchLabels:
+      app: csi-azuredisk-controller
+  template:
+    metadata:
+      labels:
+        app: csi-azuredisk-controller
+    spec:
+      hostNetwork: true
+      serviceAccountName: csi-azuredisk-controller-sa
+      nodeSelector:
+        kubernetes.io/os: linux  # add "kubernetes.io/role: master" to run controller on master node
+      priorityClassName: system-cluster-critical
+      securityContext:
+        seccompProfile:
+          type: RuntimeDefault
+      tolerations:
+        - key: "node-role.kubernetes.io/master"
+          operator: "Exists"
+          effect: "NoSchedule"
+        - key: "node-role.kubernetes.io/controlplane"
+          operator: "Exists"
+          effect: "NoSchedule"
+        - key: "node-role.kubernetes.io/control-plane"
+          operator: "Exists"
+          effect: "NoSchedule"
+        - key: "CriticalAddonsOnly"
+          operator: "Exists"
+          effect: "NoSchedule"
+      containers:
+        - name: csi-provisioner
+          image: mcr.microsoft.com/oss/kubernetes-csi/csi-provisioner:v5.1.0
+          args:
+            - "--feature-gates=Topology=true,HonorPVReclaimPolicy=true"
+            - "--csi-address=$(ADDRESS)"
+            - "--v=2"
+            - "--timeout=30s"
+            - "--leader-election"
+            - "--leader-election-namespace=kube-system"
+            - "--worker-threads=100"
+            - "--extra-create-metadata=true"
+            - "--strict-topology=true"
+            - "--kube-api-qps=50"
+            - "--kube-api-burst=100"
+            - "--retry-interval-max=30m"
+          env:
+            - name: ADDRESS
+              value: /csi/csi.sock
+          volumeMounts:
+            - mountPath: /csi
+              name: socket-dir
+          resources:
+            limits:
+              memory: 500Mi
+            requests:
+              cpu: 10m
+              memory: 20Mi
+          securityContext:
+            capabilities:
+              drop:
+                - ALL
+        - name: csi-attacher
+          image: mcr.microsoft.com/oss/kubernetes-csi/csi-attacher:v4.7.0
+          args:
+            - "-v=2"
+            - "-csi-address=$(ADDRESS)"
+            - "-timeout=1200s"
+            - "-leader-election"
+            - "--leader-election-namespace=kube-system"
+            - "-worker-threads=1000"
+            - "-kube-api-qps=200"
+            - "-kube-api-burst=400"
+          env:
+            - name: ADDRESS
+              value: /csi/csi.sock
+          volumeMounts:
+            - mountPath: /csi
+              name: socket-dir
+          resources:
+            limits:
+              memory: 500Mi
+            requests:
+              cpu: 10m
+              memory: 20Mi
+          securityContext:
+            capabilities:
+              drop:
+                - ALL
+        - name: csi-snapshotter
+          image: mcr.microsoft.com/oss/kubernetes-csi/csi-snapshotter:v8.2.0
+          args:
+            - "-csi-address=$(ADDRESS)"
+            - "-leader-election"
+            - "--leader-election-namespace=kube-system"
+            - "--v=2"
+            - "--timeout=1200s"
+            - "--extra-create-metadata=true"
+            - "--retry-interval-max=30m"
+          env:
+            - name: ADDRESS
+              value: /csi/csi.sock
+          volumeMounts:
+            - name: socket-dir
+              mountPath: /csi
+          resources:
+            limits:
+              memory: 400Mi
+            requests:
+              cpu: 10m
+              memory: 20Mi
+          securityContext:
+            capabilities:
+              drop:
+                - ALL
+        - name: csi-resizer
+          image: mcr.microsoft.com/oss/kubernetes-csi/csi-resizer:v1.12.0
+          args:
+            - "-csi-address=$(ADDRESS)"
+            - "-v=2"
+            - "-leader-election"
+            - "--leader-election-namespace=kube-system"
+            - '-handle-volume-inuse-error=false'
+            - '-feature-gates=RecoverVolumeExpansionFailure=true'
+            - "-timeout=240s"
+            - "--retry-interval-max=30m"
+          env:
+            - name: ADDRESS
+              value: /csi/csi.sock
+          volumeMounts:
+            - name: socket-dir
+              mountPath: /csi
+          resources:
+            limits:
+              memory: 500Mi
+            requests:
+              cpu: 10m
+              memory: 20Mi
+          securityContext:
+            capabilities:
+              drop:
+                - ALL
+        - name: liveness-probe
+          image: mcr.microsoft.com/oss/kubernetes-csi/livenessprobe:v2.14.0
+          args:
+            - --csi-address=/csi/csi.sock
+            - --probe-timeout=3s
+            - --http-endpoint=localhost:29602
+            - --v=2
+          volumeMounts:
+            - name: socket-dir
+              mountPath: /csi
+          resources:
+            limits:
+              memory: 100Mi
+            requests:
+              cpu: 10m
+              memory: 20Mi
+          securityContext:
+            capabilities:
+              drop:
+                - ALL
+        - name: azuredisk
+          image: mcr.microsoft.com/oss/kubernetes-csi/azuredisk-csi:v1.31.2
+          imagePullPolicy: IfNotPresent
+          args:
+            - "--v=5"
+            - "--endpoint=$(CSI_ENDPOINT)"
+            - "--metrics-address=0.0.0.0:29604"
+            - "--user-agent-suffix=OSS-kubectl"
+            - "--disable-avset-nodes=false"
+            - "--allow-empty-cloud-config=false"
+          ports:
+            - containerPort: 29604
+              name: metrics
+              protocol: TCP
+          livenessProbe:
+            failureThreshold: 5
+            httpGet:
+              host: localhost
+              path: /healthz
+              port: 29602
+            initialDelaySeconds: 30
+            timeoutSeconds: 10
+            periodSeconds: 30
+          env:
+            - name: AZURE_CREDENTIAL_FILE
+              valueFrom:
+                configMapKeyRef:
+                  name: azure-cred-file
+                  key: path
+                  optional: true
+            - name: CSI_ENDPOINT
+              value: unix:///csi/csi.sock
+          volumeMounts:
+            - mountPath: /csi
+              name: socket-dir
+            - mountPath: /etc/kubernetes/
+              name: azure-cred
+          resources:
+            limits:
+              memory: 500Mi
+            requests:
+              cpu: 10m
+              memory: 20Mi
+          securityContext:
+            capabilities:
+              drop:
+                - ALL
+      volumes:
+        - name: socket-dir
+          emptyDir: {}
+        - name: azure-cred
+          hostPath:
+            path: /etc/kubernetes/
+            type: DirectoryOrCreate
diff --git a/deploy/v1.31.2/csi-azuredisk-driver.yaml b/deploy/v1.31.2/csi-azuredisk-driver.yaml
new file mode 100644
index 0000000000..3afc170e89
--- /dev/null
+++ b/deploy/v1.31.2/csi-azuredisk-driver.yaml
@@ -0,0 +1,12 @@
+---
+apiVersion: storage.k8s.io/v1
+kind: CSIDriver
+metadata:
+  name: disk.csi.azure.com
+  annotations:
+    csiDriver: v1.31.0
+    snapshot: v6.2.1
+spec:
+  attachRequired: true
+  podInfoOnMount: false
+  fsGroupPolicy: File
diff --git a/deploy/v1.31.2/csi-azuredisk-node-windows-hostprocess.yaml b/deploy/v1.31.2/csi-azuredisk-node-windows-hostprocess.yaml
new file mode 100644
index 0000000000..4725c5dda6
--- /dev/null
+++ b/deploy/v1.31.2/csi-azuredisk-node-windows-hostprocess.yaml
@@ -0,0 +1,120 @@
+---
+kind: DaemonSet
+apiVersion: apps/v1
+metadata:
+  name: csi-azuredisk-node-win
+  namespace: kube-system
+spec:
+  updateStrategy:
+    rollingUpdate:
+      maxUnavailable: 1
+    type: RollingUpdate
+  selector:
+    matchLabels:
+      app: csi-azuredisk-node-win
+  template:
+    metadata:
+      labels:
+        app: csi-azuredisk-node-win
+    spec:
+      serviceAccountName: csi-azuredisk-node-sa
+      tolerations:
+        - key: "node.kubernetes.io/os"
+          operator: "Exists"
+          effect: "NoSchedule"
+      nodeSelector:
+        kubernetes.io/os: windows
+      affinity:
+        nodeAffinity:
+          requiredDuringSchedulingIgnoredDuringExecution:
+            nodeSelectorTerms:
+              - matchExpressions:
+                  - key: type
+                    operator: NotIn
+                    values:
+                      - virtual-kubelet
+      priorityClassName: system-node-critical
+      securityContext:
+        windowsOptions:
+          hostProcess: true
+          runAsUserName: "NT AUTHORITY\\SYSTEM"
+      hostNetwork: true
+      initContainers:
+        - name: init
+          image: mcr.microsoft.com/oss/kubernetes-csi/azuredisk-csi:v1.31.2-windows-hp
+          imagePullPolicy: IfNotPresent
+          command:
+            - "powershell.exe"
+            - "-c"
+            - "New-Item -ItemType Directory -Path C:\\var\\lib\\kubelet\\plugins\\disk.csi.azure.com\\ -Force"
+          securityContext:
+            capabilities:
+              drop:
+                - ALL
+      containers:
+        - name: node-driver-registrar
+          image: mcr.microsoft.com/oss/kubernetes-csi/csi-node-driver-registrar:v2.12.0
+          imagePullPolicy: IfNotPresent
+          command:
+            - "csi-node-driver-registrar.exe"
+          args:
+            - "--v=2"
+            - "--csi-address=$(CSI_ENDPOINT)"
+            - "--kubelet-registration-path=$(DRIVER_REG_SOCK_PATH)"
+            - "--plugin-registration-path=$(PLUGIN_REG_DIR)"
+          env:
+            - name: CSI_ENDPOINT
+              value: unix://C:\\var\\lib\\kubelet\\plugins\\disk.csi.azure.com\\csi.sock
+            - name: DRIVER_REG_SOCK_PATH
+              value: C:\\var\\lib\\kubelet\\plugins\\disk.csi.azure.com\\csi.sock
+            - name: PLUGIN_REG_DIR
+              value: C:\\var\\lib\\kubelet\\plugins_registry\\
+            - name: KUBE_NODE_NAME
+              valueFrom:
+                fieldRef:
+                  fieldPath: spec.nodeName
+          resources:
+            limits:
+              memory: 150Mi
+            requests:
+              cpu: 30m
+              memory: 40Mi
+          securityContext:
+            capabilities:
+              drop:
+                - ALL
+        - name: azuredisk
+          image: mcr.microsoft.com/oss/kubernetes-csi/azuredisk-csi:v1.31.2-windows-hp
+          imagePullPolicy: IfNotPresent
+          command:
+            - "azurediskplugin.exe"
+          args:
+            - --v=5
+            - --endpoint=$(CSI_ENDPOINT)
+            - --nodeid=$(KUBE_NODE_NAME)
+            - --allow-empty-cloud-config=true
+            - --enable-windows-host-process=true
+          env:
+            - name: AZURE_CREDENTIAL_FILE
+              valueFrom:
+                configMapKeyRef:
+                  name: azure-cred-file
+                  key: path-windows
+                  optional: true
+            - name: CSI_ENDPOINT
+              value: unix://C:\\var\\lib\\kubelet\\plugins\\disk.csi.azure.com\\csi.sock
+            - name: KUBE_NODE_NAME
+              valueFrom:
+                fieldRef:
+                  apiVersion: v1
+                  fieldPath: spec.nodeName
+          resources:
+            limits:
+              memory: 1000Mi
+            requests:
+              cpu: 10m
+              memory: 40Mi
+          securityContext:
+            capabilities:
+              drop:
+                - ALL
diff --git a/deploy/v1.31.2/csi-azuredisk-node-windows.yaml b/deploy/v1.31.2/csi-azuredisk-node-windows.yaml
new file mode 100644
index 0000000000..35e55225f2
--- /dev/null
+++ b/deploy/v1.31.2/csi-azuredisk-node-windows.yaml
@@ -0,0 +1,198 @@
+---
+kind: DaemonSet
+apiVersion: apps/v1
+metadata:
+  name: csi-azuredisk-node-win
+  namespace: kube-system
+spec:
+  updateStrategy:
+    rollingUpdate:
+      maxUnavailable: 1
+    type: RollingUpdate
+  selector:
+    matchLabels:
+      app: csi-azuredisk-node-win
+  template:
+    metadata:
+      labels:
+        app: csi-azuredisk-node-win
+    spec:
+      serviceAccountName: csi-azuredisk-node-sa
+      tolerations:
+        - key: "node.kubernetes.io/os"
+          operator: "Exists"
+          effect: "NoSchedule"
+      nodeSelector:
+        kubernetes.io/os: windows
+      affinity:
+        nodeAffinity:
+          requiredDuringSchedulingIgnoredDuringExecution:
+            nodeSelectorTerms:
+              - matchExpressions:
+                  - key: type
+                    operator: NotIn
+                    values:
+                      - virtual-kubelet
+      priorityClassName: system-node-critical
+      securityContext:
+        seccompProfile:
+          type: RuntimeDefault
+      containers:
+        - name: liveness-probe
+          volumeMounts:
+            - mountPath: C:\csi
+              name: plugin-dir
+          image: mcr.microsoft.com/oss/kubernetes-csi/livenessprobe:v2.14.0
+          args:
+            - "--csi-address=$(CSI_ENDPOINT)"
+            - "--probe-timeout=30s"
+            - "--health-port=29603"
+            - "--v=2"
+          env:
+            - name: CSI_ENDPOINT
+              value: unix://C:\\csi\\csi.sock
+          resources:
+            limits:
+              memory: 150Mi
+            requests:
+              cpu: 10m
+              memory: 40Mi
+          securityContext:
+            capabilities:
+              drop:
+                - ALL
+        - name: node-driver-registrar
+          image: mcr.microsoft.com/oss/kubernetes-csi/csi-node-driver-registrar:v2.12.0
+          args:
+            - "--v=2"
+            - "--csi-address=$(CSI_ENDPOINT)"
+            - "--kubelet-registration-path=$(DRIVER_REG_SOCK_PATH)"
+          env:
+            - name: CSI_ENDPOINT
+              value: unix://C:\\csi\\csi.sock
+            - name: DRIVER_REG_SOCK_PATH
+              value: C:\\var\\lib\\kubelet\\plugins\\disk.csi.azure.com\\csi.sock
+            - name: KUBE_NODE_NAME
+              valueFrom:
+                fieldRef:
+                  fieldPath: spec.nodeName
+          volumeMounts:
+            - name: kubelet-dir
+              mountPath: "C:\\var\\lib\\kubelet"
+            - name: plugin-dir
+              mountPath: C:\csi
+            - name: registration-dir
+              mountPath: C:\registration
+          resources:
+            limits:
+              memory: 150Mi
+            requests:
+              cpu: 30m
+              memory: 40Mi
+          securityContext:
+            capabilities:
+              drop:
+                - ALL
+        - name: azuredisk
+          image: mcr.microsoft.com/oss/kubernetes-csi/azuredisk-csi:v1.31.2
+          imagePullPolicy: IfNotPresent
+          args:
+            - "--v=5"
+            - "--endpoint=$(CSI_ENDPOINT)"
+            - "--nodeid=$(KUBE_NODE_NAME)"
+            - "--allow-empty-cloud-config=true"
+            - "--get-node-info-from-labels=false"
+          ports:
+            - containerPort: 29603
+              name: healthz
+              protocol: TCP
+          livenessProbe:
+            failureThreshold: 5
+            httpGet:
+              path: /healthz
+              port: healthz
+            initialDelaySeconds: 60
+            timeoutSeconds: 30
+            periodSeconds: 30
+          env:
+            - name: AZURE_CREDENTIAL_FILE
+              valueFrom:
+                configMapKeyRef:
+                  name: azure-cred-file
+                  key: path-windows
+                  optional: true
+            - name: CSI_ENDPOINT
+              value: unix://C:\\csi\\csi.sock
+            - name: KUBE_NODE_NAME
+              valueFrom:
+                fieldRef:
+                  apiVersion: v1
+                  fieldPath: spec.nodeName
+          volumeMounts:
+            - name: kubelet-dir
+              mountPath: "C:\\var\\lib\\kubelet"
+            - name: plugin-dir
+              mountPath: C:\csi
+            - name: azure-config
+              mountPath: C:\k
+            - name: csi-proxy-fs-pipe-v1
+              mountPath: \\.\pipe\csi-proxy-filesystem-v1
+            - name: csi-proxy-disk-pipe-v1
+              mountPath: \\.\pipe\csi-proxy-disk-v1
+            - name: csi-proxy-volume-pipe-v1
+              mountPath: \\.\pipe\csi-proxy-volume-v1
+            # these paths are still included for compatibility, they're used
+            # only if the node has still the beta version of the CSI proxy
+            - name: csi-proxy-fs-pipe-v1beta1
+              mountPath: \\.\pipe\csi-proxy-filesystem-v1beta1
+            - name: csi-proxy-disk-pipe-v1beta2
+              mountPath: \\.\pipe\csi-proxy-disk-v1beta2
+            - name: csi-proxy-volume-pipe-v1beta2
+              mountPath: \\.\pipe\csi-proxy-volume-v1beta2
+          resources:
+            limits:
+              memory: 600Mi
+            requests:
+              cpu: 10m
+              memory: 40Mi
+          securityContext:
+            capabilities:
+              drop:
+                - ALL
+      volumes:
+        - name: csi-proxy-fs-pipe-v1
+          hostPath:
+            path: \\.\pipe\csi-proxy-filesystem-v1
+        - name: csi-proxy-disk-pipe-v1
+          hostPath:
+            path: \\.\pipe\csi-proxy-disk-v1
+        - name: csi-proxy-volume-pipe-v1
+          hostPath:
+            path: \\.\pipe\csi-proxy-volume-v1
+        # these paths are still included for compatibility, they're used
+        # only if the node has still the beta version of the CSI proxy
+        - name: csi-proxy-fs-pipe-v1beta1
+          hostPath:
+            path: \\.\pipe\csi-proxy-filesystem-v1beta1
+        - name: csi-proxy-disk-pipe-v1beta2
+          hostPath:
+            path: \\.\pipe\csi-proxy-disk-v1beta2
+        - name: csi-proxy-volume-pipe-v1beta2
+          hostPath:
+            path: \\.\pipe\csi-proxy-volume-v1beta2
+        - name: registration-dir
+          hostPath:
+            path: C:\var\lib\kubelet\plugins_registry\
+            type: Directory
+        - name: kubelet-dir
+          hostPath:
+            path: C:\var\lib\kubelet\
+            type: Directory
+        - name: plugin-dir
+          hostPath:
+            path: C:\var\lib\kubelet\plugins\disk.csi.azure.com\
+            type: DirectoryOrCreate
+        - name: azure-config
+          hostPath:
+            path: C:\k
+            type: DirectoryOrCreate
diff --git a/deploy/v1.31.2/csi-azuredisk-node.yaml b/deploy/v1.31.2/csi-azuredisk-node.yaml
new file mode 100644
index 0000000000..f62f53f50f
--- /dev/null
+++ b/deploy/v1.31.2/csi-azuredisk-node.yaml
@@ -0,0 +1,178 @@
+---
+kind: DaemonSet
+apiVersion: apps/v1
+metadata:
+  name: csi-azuredisk-node
+  namespace: kube-system
+spec:
+  updateStrategy:
+    rollingUpdate:
+      maxUnavailable: 1
+    type: RollingUpdate
+  selector:
+    matchLabels:
+      app: csi-azuredisk-node
+  template:
+    metadata:
+      labels:
+        app: csi-azuredisk-node
+    spec:
+      hostNetwork: true
+      dnsPolicy: Default
+      serviceAccountName: csi-azuredisk-node-sa
+      nodeSelector:
+        kubernetes.io/os: linux
+      affinity:
+        nodeAffinity:
+          requiredDuringSchedulingIgnoredDuringExecution:
+            nodeSelectorTerms:
+              - matchExpressions:
+                  - key: type
+                    operator: NotIn
+                    values:
+                      - virtual-kubelet
+      priorityClassName: system-node-critical
+      securityContext:
+        seccompProfile:
+          type: RuntimeDefault
+      tolerations:
+        - operator: "Exists"
+      containers:
+        - name: liveness-probe
+          volumeMounts:
+            - mountPath: /csi
+              name: socket-dir
+          image: mcr.microsoft.com/oss/kubernetes-csi/livenessprobe:v2.14.0
+          args:
+            - --csi-address=/csi/csi.sock
+            - --probe-timeout=3s
+            - --http-endpoint=localhost:29603
+            - --v=2
+          resources:
+            limits:
+              memory: 100Mi
+            requests:
+              cpu: 10m
+              memory: 20Mi
+          securityContext:
+            capabilities:
+              drop:
+                - ALL
+        - name: node-driver-registrar
+          image: mcr.microsoft.com/oss/kubernetes-csi/csi-node-driver-registrar:v2.12.0
+          args:
+            - --csi-address=$(ADDRESS)
+            - --kubelet-registration-path=$(DRIVER_REG_SOCK_PATH)
+            - --v=2
+          env:
+            - name: ADDRESS
+              value: /csi/csi.sock
+            - name: DRIVER_REG_SOCK_PATH
+              value: /var/lib/kubelet/plugins/disk.csi.azure.com/csi.sock
+          volumeMounts:
+            - name: socket-dir
+              mountPath: /csi
+            - name: registration-dir
+              mountPath: /registration
+          resources:
+            limits:
+              memory: 100Mi
+            requests:
+              cpu: 10m
+              memory: 20Mi
+          securityContext:
+            capabilities:
+              drop:
+                - ALL
+        - name: azuredisk
+          image: mcr.microsoft.com/oss/kubernetes-csi/azuredisk-csi:v1.31.2
+          imagePullPolicy: IfNotPresent
+          args:
+            - "--v=5"
+            - "--endpoint=$(CSI_ENDPOINT)"
+            - "--nodeid=$(KUBE_NODE_NAME)"
+            - "--enable-perf-optimization=true"
+            - "--allow-empty-cloud-config=true"
+            - "--get-node-info-from-labels=false"
+          ports:
+            - containerPort: 29603
+              name: healthz
+              protocol: TCP
+          livenessProbe:
+            failureThreshold: 5
+            httpGet:
+              host: localhost
+              path: /healthz
+              port: 29603
+            initialDelaySeconds: 30
+            timeoutSeconds: 10
+            periodSeconds: 30
+          env:
+            - name: AZURE_CREDENTIAL_FILE
+              valueFrom:
+                configMapKeyRef:
+                  name: azure-cred-file
+                  key: path
+                  optional: true
+            - name: CSI_ENDPOINT
+              value: unix:///csi/csi.sock
+            - name: KUBE_NODE_NAME
+              valueFrom:
+                fieldRef:
+                  apiVersion: v1
+                  fieldPath: spec.nodeName
+          securityContext:
+            privileged: true
+            capabilities:
+              drop:
+                - ALL
+          volumeMounts:
+            - mountPath: /csi
+              name: socket-dir
+            - mountPath: /var/lib/kubelet/
+              mountPropagation: Bidirectional
+              name: mountpoint-dir
+            - mountPath: /etc/kubernetes/
+              name: azure-cred
+            - mountPath: /dev
+              name: device-dir
+            - mountPath: /sys/bus/scsi/devices
+              name: sys-devices-dir
+            - mountPath: /sys/class/
+              name: sys-class
+          resources:
+            limits:
+              memory: 1000Mi
+            requests:
+              cpu: 10m
+              memory: 20Mi
+      volumes:
+        - hostPath:
+            path: /var/lib/kubelet/plugins/disk.csi.azure.com
+            type: DirectoryOrCreate
+          name: socket-dir
+        - hostPath:
+            path: /var/lib/kubelet/
+            type: DirectoryOrCreate
+          name: mountpoint-dir
+        - hostPath:
+            path: /var/lib/kubelet/plugins_registry/
+            type: DirectoryOrCreate
+          name: registration-dir
+        - hostPath:
+            path: /etc/kubernetes/
+            type: DirectoryOrCreate
+          name: azure-cred
+        - hostPath:
+            path: /dev
+            type: Directory
+          name: device-dir
+        - hostPath:
+            path: /sys/bus/scsi/devices
+            type: Directory
+          name: sys-devices-dir
+        - hostPath:
+            path: /sys/class/
+            type: Directory
+          name: sys-class
+---
diff --git a/deploy/v1.31.2/csi-snapshot-controller.yaml b/deploy/v1.31.2/csi-snapshot-controller.yaml
new file mode 100644
index 0000000000..ec40432827
--- /dev/null
+++ b/deploy/v1.31.2/csi-snapshot-controller.yaml
@@ -0,0 +1,62 @@
+---
+kind: Deployment
+apiVersion: apps/v1
+metadata:
+  name: csi-snapshot-controller
+  namespace: kube-system
+spec:
+  replicas: 2
+  selector:
+    matchLabels:
+      app: csi-snapshot-controller
+  # the snapshot controller won't be marked as ready if the v1 CRDs are unavailable
+  # in #504 the snapshot-controller will exit after around 7.5 seconds if it
+  # can't find the v1 CRDs so this value should be greater than that
+  minReadySeconds: 15
+  strategy:
+    rollingUpdate:
+      maxSurge: 0
+      maxUnavailable: 1
+    type: RollingUpdate
+  template:
+    metadata:
+      labels:
+        app: csi-snapshot-controller
+    spec:
+      serviceAccountName: csi-snapshot-controller-sa
+      nodeSelector:
+        kubernetes.io/os: linux
+      priorityClassName: system-cluster-critical
+      securityContext:
+        seccompProfile:
+          type: RuntimeDefault
+      tolerations:
+        - key: "node-role.kubernetes.io/master"
+          operator: "Equal"
+          value: "true"
+          effect: "NoSchedule"
+        - key: "node-role.kubernetes.io/controlplane"
+          operator: "Equal"
+          value: "true"
+          effect: "NoSchedule"
+        - key: "node-role.kubernetes.io/control-plane"
+          operator: "Equal"
+          value: "true"
+          effect: "NoSchedule"
+      containers:
+        - name: csi-snapshot-controller
+          image: mcr.microsoft.com/oss/kubernetes-csi/snapshot-controller:v8.2.0
+          args:
+            - "--v=2"
+            - "--leader-election=true"
+            - "--leader-election-namespace=kube-system"
+          resources:
+            limits:
+              memory: 500Mi
+            requests:
+              cpu: 10m
+              memory: 20Mi
+          securityContext:
+            capabilities:
+              drop:
+                - ALL
diff --git a/deploy/v1.31.2/rbac-csi-azuredisk-controller.yaml b/deploy/v1.31.2/rbac-csi-azuredisk-controller.yaml
new file mode 100644
index 0000000000..9a0ab2dfa5
--- /dev/null
+++ b/deploy/v1.31.2/rbac-csi-azuredisk-controller.yaml
@@ -0,0 +1,202 @@
+---
+apiVersion: v1
+kind: ServiceAccount
+metadata:
+  name: csi-azuredisk-controller-sa
+  namespace: kube-system
+---
+
+kind: ClusterRole
+apiVersion: rbac.authorization.k8s.io/v1
+metadata:
+  name: azuredisk-external-provisioner-role
+rules:
+  - apiGroups: [""]
+    resources: ["persistentvolumes"]
+    verbs: ["get", "list", "watch", "create", "patch", "delete"]
+  - apiGroups: [""]
+    resources: ["persistentvolumeclaims"]
+    verbs: ["get", "list", "watch", "update"]
+  - apiGroups: ["storage.k8s.io"]
+    resources: ["storageclasses"]
+    verbs: ["get", "list", "watch"]
+  - apiGroups: [""]
+    resources: ["events"]
+    verbs: ["get", "list", "watch", "create", "update", "patch"]
+  - apiGroups: ["storage.k8s.io"]
+    resources: ["csinodes"]
+    verbs: ["get", "list", "watch"]
+  - apiGroups: [""]
+    resources: ["nodes"]
+    verbs: ["get", "list", "watch"]
+  - apiGroups: ["snapshot.storage.k8s.io"]
+    resources: ["volumesnapshots"]
+    verbs: ["get", "list"]
+  - apiGroups: ["snapshot.storage.k8s.io"]
+    resources: ["volumesnapshotcontents"]
+    verbs: ["get", "list"]
+  - apiGroups: ["coordination.k8s.io"]
+    resources: ["leases"]
+    verbs: ["get", "watch", "list", "delete", "update", "create", "patch"]
+---
+
+kind: ClusterRoleBinding
+apiVersion: rbac.authorization.k8s.io/v1
+metadata:
+  name: azuredisk-csi-provisioner-binding
+subjects:
+  - kind: ServiceAccount
+    name: csi-azuredisk-controller-sa
+    namespace: kube-system
+roleRef:
+  kind: ClusterRole
+  name: azuredisk-external-provisioner-role
+  apiGroup: rbac.authorization.k8s.io
+
+---
+
+kind: ClusterRole
+apiVersion: rbac.authorization.k8s.io/v1
+metadata:
+  name: azuredisk-external-attacher-role
+rules:
+  - apiGroups: [""]
+    resources: ["persistentvolumes"]
+    verbs: ["get", "list", "watch", "update"]
+  - apiGroups: [""]
+    resources: ["nodes"]
+    verbs: ["get", "list", "watch"]
+  - apiGroups: ["csi.storage.k8s.io"]
+    resources: ["csinodeinfos"]
+    verbs: ["get", "list", "watch"]
+  - apiGroups: ["storage.k8s.io"]
+    resources: ["volumeattachments"]
+    verbs: ["get", "list", "watch", "update", "patch"]
+  - apiGroups: ["storage.k8s.io"]
+    resources: ["volumeattachments/status"]
+    verbs: ["get", "list", "watch", "update", "patch"]
+  - apiGroups: ["storage.k8s.io"]
+    resources: ["volumeattributesclasses"]
+    verbs: ["get"]
+  - apiGroups: ["coordination.k8s.io"]
+    resources: ["leases"]
+    verbs: ["get", "watch", "list", "delete", "update", "create", "patch"]
+---
+
+kind: ClusterRoleBinding
+apiVersion: rbac.authorization.k8s.io/v1
+metadata:
+  name: azuredisk-csi-attacher-binding
+subjects:
+  - kind: ServiceAccount
+    name: csi-azuredisk-controller-sa
+    namespace: kube-system
+roleRef:
+  kind: ClusterRole
+  name: azuredisk-external-attacher-role
+  apiGroup: rbac.authorization.k8s.io
+
+---
+
+kind: ClusterRole
+apiVersion: rbac.authorization.k8s.io/v1
+metadata:
+  name: azuredisk-external-snapshotter-role
+rules:
+  - apiGroups: [""]
+    resources: ["events"]
+    verbs: ["list", "watch", "create", "update", "patch"]
+  - apiGroups: [""]
+    resources: ["secrets"]
+    verbs: ["get"]
+  - apiGroups: ["snapshot.storage.k8s.io"]
+    resources: ["volumesnapshotclasses"]
+    verbs: ["get", "list", "watch"]
+  - apiGroups: ["snapshot.storage.k8s.io"]
+    resources: ["volumesnapshotcontents"]
+    verbs: ["create", "get", "list", "watch", "update", "delete", "patch"]
+  - apiGroups: ["snapshot.storage.k8s.io"]
+    resources: ["volumesnapshotcontents/status"]
+    verbs: ["update", "patch"]
+  - apiGroups: ["coordination.k8s.io"]
+    resources: ["leases"]
+    verbs: ["get", "watch", "list", "delete", "update", "create", "patch"]
+---
+
+kind: ClusterRoleBinding
+apiVersion: rbac.authorization.k8s.io/v1
+metadata:
+  name: azuredisk-csi-snapshotter-binding
+subjects:
+  - kind: ServiceAccount
+    name: csi-azuredisk-controller-sa
+    namespace: kube-system
+roleRef:
+  kind: ClusterRole
+  name: azuredisk-external-snapshotter-role
+  apiGroup: rbac.authorization.k8s.io
+---
+
+kind: ClusterRole
+apiVersion: rbac.authorization.k8s.io/v1
+metadata:
+  name: azuredisk-external-resizer-role
+rules:
+  - apiGroups: [""]
+    resources: ["persistentvolumes"]
+    verbs: ["get", "list", "watch", "update", "patch"]
+  - apiGroups: [""]
+    resources: ["persistentvolumeclaims"]
+    verbs: ["get", "list", "watch"]
+  - apiGroups: [""]
+    resources: ["persistentvolumeclaims/status"]
+    verbs: ["update", "patch"]
+  - apiGroups: [""]
+    resources: ["events"]
+    verbs: ["list", "watch", "create", "update", "patch"]
+  - apiGroups: ["coordination.k8s.io"]
+    resources: ["leases"]
+    verbs: ["get", "watch", "list", "delete", "update", "create", "patch"]
+  - apiGroups: [""]
+    resources: ["pods"]
+    verbs: ["get", "list", "watch"]
+  - apiGroups: ["storage.k8s.io"]
+    resources: ["volumeattributesclasses"]
+    verbs: ["get", "list", "watch"]
+---
+kind: ClusterRoleBinding
+apiVersion: rbac.authorization.k8s.io/v1
+metadata:
+  name: azuredisk-csi-resizer-role
+subjects:
+  - kind: ServiceAccount
+    name: csi-azuredisk-controller-sa
+    namespace: kube-system
+roleRef:
+  kind: ClusterRole
+  name: azuredisk-external-resizer-role
+  apiGroup: rbac.authorization.k8s.io
+
+---
+kind: ClusterRole
+apiVersion: rbac.authorization.k8s.io/v1
+metadata:
+  name: csi-azuredisk-controller-secret-role
+rules:
+  - apiGroups: [""]
+    resources: ["secrets"]
+    verbs: ["get", "list"]
+
+---
+kind: ClusterRoleBinding
+apiVersion: rbac.authorization.k8s.io/v1
+metadata:
+  name: csi-azuredisk-controller-secret-binding
+subjects:
+  - kind: ServiceAccount
+    name: csi-azuredisk-controller-sa
+    namespace: kube-system
+roleRef:
+  kind: ClusterRole
+  name: csi-azuredisk-controller-secret-role
+  apiGroup: rbac.authorization.k8s.io
diff --git a/deploy/v1.31.2/rbac-csi-azuredisk-node.yaml b/deploy/v1.31.2/rbac-csi-azuredisk-node.yaml
new file mode 100644
index 0000000000..9225c168d5
--- /dev/null
+++ b/deploy/v1.31.2/rbac-csi-azuredisk-node.yaml
@@ -0,0 +1,35 @@
+---
+apiVersion: v1
+kind: ServiceAccount
+metadata:
+  name: csi-azuredisk-node-sa
+  namespace: kube-system
+
+---
+kind: ClusterRole
+apiVersion: rbac.authorization.k8s.io/v1
+metadata:
+  name: csi-azuredisk-node-role
+rules:
+  - apiGroups: [""]
+    resources: ["secrets"]
+    verbs: ["get"]
+  - apiGroups: [""]
+    resources: ["nodes"]
+    verbs: ["get", "patch"]
+  - apiGroups: ["storage.k8s.io"]
+    resources: ["csinodes"]
+    verbs: ["get"]
+---
+kind: ClusterRoleBinding
+apiVersion: rbac.authorization.k8s.io/v1
+metadata:
+  name: csi-azuredisk-node-secret-binding
+subjects:
+  - kind: ServiceAccount
+    name: csi-azuredisk-node-sa
+    namespace: kube-system
+roleRef:
+  kind: ClusterRole
+  name: csi-azuredisk-node-role
+  apiGroup: rbac.authorization.k8s.io
diff --git a/deploy/v1.31.2/rbac-csi-snapshot-controller.yaml b/deploy/v1.31.2/rbac-csi-snapshot-controller.yaml
new file mode 100644
index 0000000000..8ef9352476
--- /dev/null
+++ b/deploy/v1.31.2/rbac-csi-snapshot-controller.yaml
@@ -0,0 +1,78 @@
+---
+apiVersion: v1
+kind: ServiceAccount
+metadata:
+  name: csi-snapshot-controller-sa
+  namespace: kube-system
+
+---
+kind: ClusterRole
+apiVersion: rbac.authorization.k8s.io/v1
+metadata:
+  name: csi-snapshot-controller-role
+rules:
+  - apiGroups: [""]
+    resources: ["persistentvolumes"]
+    verbs: ["get", "list", "watch"]
+  - apiGroups: [""]
+    resources: ["persistentvolumeclaims"]
+    verbs: ["get", "list", "watch", "update"]
+  - apiGroups: ["storage.k8s.io"]
+    resources: ["storageclasses"]
+    verbs: ["get", "list", "watch"]
+  - apiGroups: [""]
+    resources: ["events"]
+    verbs: ["list", "watch", "create", "update", "patch"]
+  - apiGroups: ["snapshot.storage.k8s.io"]
+    resources: ["volumesnapshotclasses"]
+    verbs: ["get", "list", "watch"]
+  - apiGroups: ["snapshot.storage.k8s.io"]
+    resources: ["volumesnapshotcontents"]
+    verbs: ["create", "get", "list", "watch", "update", "delete", "patch"]
+  - apiGroups: ["snapshot.storage.k8s.io"]
+    resources: ["volumesnapshotcontents/status"]
+    verbs: ["patch"]
+  - apiGroups: ["snapshot.storage.k8s.io"]
+    resources: ["volumesnapshots"]
+    verbs: ["get", "list", "watch", "update", "patch", "create"]
+  - apiGroups: ["snapshot.storage.k8s.io"]
+    resources: ["volumesnapshots/status"]
+    verbs: ["update", "patch"]
+
+---
+kind: ClusterRoleBinding
+apiVersion: rbac.authorization.k8s.io/v1
+metadata:
+  name: csi-snapshot-controller-binding
+subjects:
+  - kind: ServiceAccount
+    name: csi-snapshot-controller-sa
+    namespace: kube-system
+roleRef:
+  kind: ClusterRole
+  name: csi-snapshot-controller-role
+  apiGroup: rbac.authorization.k8s.io
+
+---
+kind: ClusterRole
+apiVersion: rbac.authorization.k8s.io/v1
+metadata:
+  name: csi-snapshot-controller-leaderelection-role
+rules:
+  - apiGroups: ["coordination.k8s.io"]
+    resources: ["leases"]
+    verbs: ["get", "watch", "list", "delete", "update", "create", "patch"]
+
+---
+kind: ClusterRoleBinding
+apiVersion: rbac.authorization.k8s.io/v1
+metadata:
+  name: csi-snapshot-controller-leaderelection-binding
+subjects:
+  - kind: ServiceAccount
+    name: csi-snapshot-controller-sa
+    namespace: kube-system
+roleRef:
+  kind: ClusterRole
+  name: csi-snapshot-controller-leaderelection-role
+  apiGroup: rbac.authorization.k8s.io
diff --git a/docs/install-azuredisk-csi-driver.md b/docs/install-azuredisk-csi-driver.md
index b86ba5b15b..5995796827 100644
--- a/docs/install-azuredisk-csi-driver.md
+++ b/docs/install-azuredisk-csi-driver.md
@@ -4,7 +4,7 @@
 >  - please use helm install method for more customization, e.g. Azure Stack, RedHat OpenShift support.
 > 
  - [install CSI driver master version](./install-csi-driver-master.md)(only for testing purpose)
- - [install v1.31.1 CSI driver](./install-csi-driver-v1.31.1.md)
+ - [install v1.31.2 CSI driver](./install-csi-driver-v1.31.2.md)
  - [install v1.30.3 CSI driver](./install-csi-driver-v1.30.3.md)
  - [install v1.29.8 CSI driver](./install-csi-driver-v1.29.8.md)
  - [install v1.28.10 CSI driver](./install-csi-driver-v1.28.10.md)
diff --git a/docs/install-csi-driver-v1.31.2.md b/docs/install-csi-driver-v1.31.2.md
new file mode 100644
index 0000000000..caa797ce0f
--- /dev/null
+++ b/docs/install-csi-driver-v1.31.2.md
@@ -0,0 +1,48 @@
+## Install CSI driver development version on a Kubernetes cluster
+If you have already installed Helm, you can also use it to install this driver. Please check [Installation with Helm](../charts/README.md).
+
+### Install by kubectl
+ - Option#1. remote install
+```console
+curl -skSL https://raw.githubusercontent.com/kubernetes-sigs/azuredisk-csi-driver/v1.31.2/deploy/install-driver.sh | bash -s v1.31.2 snapshot --
+```
+
+ - Option#2. local install
+```console
+git clone https://github.com/kubernetes-sigs/azuredisk-csi-driver.git
+cd azuredisk-csi-driver
+git checkout v1.31.2
+./deploy/install-driver.sh v1.31.2 local
+```
+
+### Check pods status:
+
+```console
+kubectl -n kube-system get pod -o wide --watch -l app=csi-azuredisk-controller
+kubectl -n kube-system get pod -o wide --watch -l app=csi-azuredisk-node
+```
+
+example output:
+
+```console
+NAME                                            READY   STATUS    RESTARTS   AGE     IP             NODE
+csi-azuredisk-controller-56bfddd689-dh5tk       6/6     Running   0          35s     10.240.0.19    k8s-agentpool-22533604-0
+csi-azuredisk-controller-56bfddd689-7s8yg       6/6     Running   0          35s     10.240.0.29    k8s-agentpool-22533604-1
+csi-snapshot-controller-84db6dbbb-stzwr         6/6     Running   0          41s     10.240.0.17    k8s-agentpool-22533604-0
+csi-azuredisk-node-cvgbs                        3/3     Running   0          7m4s    10.240.0.35    k8s-agentpool-22533604-1
+csi-azuredisk-node-dr4s4                        3/3     Running   0          7m4s    10.240.0.4     k8s-agentpool-22533604-0
+```
+
+### clean up CSI driver
+ - Option#1. remote uninstall
+```console
+curl -skSL https://raw.githubusercontent.com/kubernetes-sigs/azuredisk-csi-driver/v1.31.2/deploy/uninstall-driver.sh | bash -s v1.31.2 --
+```
+
+ - Option#2. local uninstall
+```console
+git clone https://github.com/kubernetes-sigs/azuredisk-csi-driver.git
+cd azuredisk-csi-driver
+git checkout v1.31.2
+./deploy/install-driver.sh v1.31.2 local
+```