From 78a6937ae2602143eb1c6cb5fea5ca8cf8d80d8f Mon Sep 17 00:00:00 2001
From: andyzhangx <xiazhang@microsoft.com>
Date: Tue, 3 May 2022 11:22:04 +0000
Subject: [PATCH] doc: cut v4.0.0 release

fix
---
 README.md                                     |   5 +-
 charts/README.md                              |   2 +-
 charts/index.yaml                             |  23 +++-
 charts/latest/csi-driver-nfs-v4.0.0.tgz       | Bin 3608 -> 3584 bytes
 charts/latest/csi-driver-nfs/Chart.yaml       |   2 +-
 charts/latest/csi-driver-nfs/values.yaml      |   4 +-
 charts/v4.0.0/csi-driver-nfs-v4.0.0.tgz       | Bin 0 -> 3583 bytes
 charts/v4.0.0/csi-driver-nfs/.helmignore      |  22 +++
 charts/v4.0.0/csi-driver-nfs/Chart.yaml       |   5 +
 .../v4.0.0/csi-driver-nfs/templates/NOTES.txt |   5 +
 .../csi-driver-nfs/templates/_helpers.tpl     |  19 +++
 .../templates/csi-nfs-controller.yaml         | 110 +++++++++++++++
 .../templates/csi-nfs-driverinfo.yaml         |  15 ++
 .../templates/csi-nfs-node.yaml               | 126 +++++++++++++++++
 .../templates/rbac-csi-nfs-controller.yaml    |  57 ++++++++
 charts/v4.0.0/csi-driver-nfs/values.yaml      | 110 +++++++++++++++
 deploy/csi-nfs-controller.yaml                |   2 +-
 deploy/csi-nfs-node.yaml                      |   2 +-
 deploy/v4.0.0/csi-nfs-controller.yaml         | 118 ++++++++++++++++
 deploy/v4.0.0/csi-nfs-driverinfo.yaml         |  11 ++
 deploy/v4.0.0/csi-nfs-node.yaml               | 130 ++++++++++++++++++
 deploy/v4.0.0/rbac-csi-nfs-controller.yaml    |  52 +++++++
 docs/install-csi-driver-v4.0.0.md             |  45 ++++++
 docs/install-nfs-csi-driver.md                |   1 +
 24 files changed, 851 insertions(+), 15 deletions(-)
 create mode 100644 charts/v4.0.0/csi-driver-nfs-v4.0.0.tgz
 create mode 100644 charts/v4.0.0/csi-driver-nfs/.helmignore
 create mode 100644 charts/v4.0.0/csi-driver-nfs/Chart.yaml
 create mode 100644 charts/v4.0.0/csi-driver-nfs/templates/NOTES.txt
 create mode 100644 charts/v4.0.0/csi-driver-nfs/templates/_helpers.tpl
 create mode 100644 charts/v4.0.0/csi-driver-nfs/templates/csi-nfs-controller.yaml
 create mode 100644 charts/v4.0.0/csi-driver-nfs/templates/csi-nfs-driverinfo.yaml
 create mode 100644 charts/v4.0.0/csi-driver-nfs/templates/csi-nfs-node.yaml
 create mode 100644 charts/v4.0.0/csi-driver-nfs/templates/rbac-csi-nfs-controller.yaml
 create mode 100644 charts/v4.0.0/csi-driver-nfs/values.yaml
 create mode 100644 deploy/v4.0.0/csi-nfs-controller.yaml
 create mode 100644 deploy/v4.0.0/csi-nfs-driverinfo.yaml
 create mode 100644 deploy/v4.0.0/csi-nfs-node.yaml
 create mode 100644 deploy/v4.0.0/rbac-csi-nfs-controller.yaml
 create mode 100644 docs/install-csi-driver-v4.0.0.md

diff --git a/README.md b/README.md
index 2f33c23e..4d98f59d 100644
--- a/README.md
+++ b/README.md
@@ -6,12 +6,13 @@
 
 This is a repository for [NFS](https://en.wikipedia.org/wiki/Network_File_System) [CSI](https://kubernetes-csi.github.io/docs/) driver, csi plugin name: `nfs.csi.k8s.io`. This driver requires existing and already configured NFSv3 or NFSv4 server, it supports dynamic provisioning of Persistent Volumes via Persistent Volume Claims by creating a new sub directory under NFS server.
 
-### Project status: Beta
+### Project status: GA
 
 ### Container Images & Kubernetes Compatibility:
 |driver version  | supported k8s version | status |
 |----------------|-----------------------|--------|
-|master branch   | 1.20+                 | beta   |
+|master branch   | 1.20+                 | GA     |
+|v4.0.0          | 1.10+                 | GA     |
 |v3.1.0          | 1.19+                 | beta   |
 |v3.0.0          | 1.19+                 | beta   |
 |v2.0.0          | 1.14+                 | alpha  |
diff --git a/charts/README.md b/charts/README.md
index c2a24028..a7c123f6 100644
--- a/charts/README.md
+++ b/charts/README.md
@@ -10,7 +10,7 @@
 ### install a specific version
 ```console
 helm repo add csi-driver-nfs https://raw.githubusercontent.com/kubernetes-csi/csi-driver-nfs/master/charts
-helm install csi-driver-nfs csi-driver-nfs/csi-driver-nfs --namespace kube-system --version v3.1.0
+helm install csi-driver-nfs csi-driver-nfs/csi-driver-nfs --namespace kube-system --version v4.0.0
 ```
 
 ### install driver with customized driver name, deployment name
diff --git a/charts/index.yaml b/charts/index.yaml
index 0a31f988..81e8cea4 100644
--- a/charts/index.yaml
+++ b/charts/index.yaml
@@ -2,17 +2,26 @@ apiVersion: v1
 entries:
   csi-driver-nfs:
   - apiVersion: v1
-    appVersion: latest
-    created: "2022-04-30T07:45:33.947314152Z"
+    appVersion: v4.0.0
+    created: "2022-05-03T11:18:21.533449624Z"
     description: CSI NFS Driver for Kubernetes
-    digest: a90874bcdaeef76bc10aea70f0ed559c69d50a9390d6c7d1b4156c4d54758c3b
+    digest: 70f403442f59edb6c01fed573ce40c625775be15b1e32c21edf5704adcc94be9
     name: csi-driver-nfs
     urls:
     - https://raw.githubusercontent.com/kubernetes-csi/csi-driver-nfs/master/charts/latest/csi-driver-nfs-v4.0.0.tgz
     version: v4.0.0
+  - apiVersion: v1
+    appVersion: v4.0.0
+    created: "2022-05-03T11:18:21.536514545Z"
+    description: CSI NFS Driver for Kubernetes
+    digest: cb537287512ce9f99adaead8cd4904ed7284780bdc44c9b8d6705e66f28bfa5c
+    name: csi-driver-nfs
+    urls:
+    - https://raw.githubusercontent.com/kubernetes-csi/csi-driver-nfs/master/charts/v4.0.0/csi-driver-nfs-v4.0.0.tgz
+    version: v4.0.0
   - apiVersion: v1
     appVersion: v3.1.0
-    created: "2022-04-30T07:45:33.949154964Z"
+    created: "2022-05-03T11:18:21.535854341Z"
     description: CSI NFS Driver for Kubernetes
     digest: 7e51bb9188b013195cafc265102fa365de9ec5513780e1dfc5363289f811a4d9
     name: csi-driver-nfs
@@ -21,7 +30,7 @@ entries:
     version: v3.1.0
   - apiVersion: v1
     appVersion: v3.0.0
-    created: "2022-04-30T07:45:33.94847026Z"
+    created: "2022-05-03T11:18:21.535058035Z"
     description: CSI NFS Driver for Kubernetes
     digest: 44406231cd5cdada1c62a0541b93b4f5d5a70ccc8c50b33553a8692fe6cfae96
     name: csi-driver-nfs
@@ -30,11 +39,11 @@ entries:
     version: v3.0.0
   - apiVersion: v1
     appVersion: v2.0.0
-    created: "2022-04-30T07:45:33.947715955Z"
+    created: "2022-05-03T11:18:21.533976127Z"
     description: CSI NFS Driver for Kubernetes
     digest: 1a32c6fc016526fe19a0c9e0dfbe83d0ddde67ced533bb5f5d24d713f706c613
     name: csi-driver-nfs
     urls:
     - https://raw.githubusercontent.com/kubernetes-csi/csi-driver-nfs/master/charts/v2.0.0/csi-driver-nfs-v2.0.0.tgz
     version: v2.0.0
-generated: "2022-04-30T07:45:33.946482046Z"
+generated: "2022-05-03T11:18:21.530613004Z"
diff --git a/charts/latest/csi-driver-nfs-v4.0.0.tgz b/charts/latest/csi-driver-nfs-v4.0.0.tgz
index 0000a2eba87f889c02753af7c06dc5a344c92ecc..aa2bdefd680b8cdb881b9fd522610fb3779f99f4 100644
GIT binary patch
delta 3351
zcmV+y4e0Wi9Dp2<P8qub^3X}rxxq}+Anx?yVlW73>DcBCMQTWqXGnkddY!}l-Oj5{
zcdygieFdE_$ivc-DNW?7&c<WaC-;pMlG4v86%{;$N!KH3I{&&Cbb^i-qlzR=wS9Kn
zKZEo4eK@fy14AL<mu!HNqekU%l3)l`mGUMvdS83S+fpty`=1b&q58rOV1@nfce{sm
z`|lkbZ0-LgN|Y%rl3#zx0GSHm?%tyb8DZ!F0Pvx5A54*$3PrV$(-0(%sM2y8T>nD_
zRJ0Wx`AQ2(M%d;<m9lI^`K+fVqnYs+&(e&s3&ChK4dHBfF7$;&g<RVPk)jt;OsH`i
zC?C&)(dl$fpvK5<&|Q}iMkmNosS7Cv_;@~w?y2cs<DwTFtjm7|7cn}2d+7!vPn3xv
zR2aJ~NG<TSzYbrXLOG!kzKbG}ac%gCBod7wXqh4Gz`w@G?dP|Uw*}%FE4ZPI!2t6v
zu?-_rkp<944O+mEFoi&e<{{h=ZXad}&36gnh6iRm!L<~Op>!dK50yWE<|_g_a842g
zF@%23LC&rrR~mm_NJBjKJUJjyeJUP+3u`8pc}{v^`C$+#noHaRNDTc8lnGTv`&0;>
z!^1<*8zRw}v`U1W3>d!e|13q87Shd!a&>2%QI4Ml%gh*78lHEZ4UnNep)!Q_gvd6d
zgLeMV^Gec~F}Elc&ngU~5m6y@&9{ty<R6IAMv88rMzwz*BVl@cA*2qW_df^wJ=08#
ze#Hs05cWNQ8zHYLAAK<Mw>-AmI!Rj|K+IJ!%M%=ujA?)!AQM8FnJl=NGpl?H$1F1p
zy{A&?e^EXDr%?JFYZV@V77QiPR?L=5AFgp4Ldz<;6byswS#n|wBC!)~<?1a`(_0u;
zPj9Kxs;Ga!;SeJoLhD@gqcO%A!`52#b3vz!aD4Vr{Edc@s6-|s%q7?Cav4piF2#TZ
z6YFU9I-L*HD;&_D8LD!tD9u9Xc9Ml|y`op6UtKm>cf-L-QEb@|y$y!&%rY(7oO$}3
zx}T8S-}sD<Gv=y6u3^Qy%|_IyOErag*(F>a0l$Bu*6ePgH9I?Si9?jgBQ)Via5Ql!
z5fVXRBvGq8N}13EHzt~zXiWJCY>K7~35mlH##*N;Y`3dkA{LQqYoe}|aTr57$|U-!
zh;1|=l%s4LdcGy*r;<*H#v(14w!NJlmkM5FjP)HuA^iS_w*!8z>aD!1q2gF>Z8vw{
zTB$wl|1>5kBN|ov{Ntz7exPsl=3}hFe|CF&wf*1zes6!f|9go7pT<~6b*O?7YHeIi
zj42aSjEyg{$#>+!lYImj4${of^8k#CiZlb?H!ehzqXa|*@4;Solj{U3e;I(;Sewt0
zJu|TF?(TeuaY#8r%WREJvljUC8k+$J?v%lrZSdJ4j;7_u2}((0gul&pm`8B1Yd_MY
zpACof7FzzC81mSDcC0ZAU|Aqxj4YXFtI)`oYwn1-&n9srX<FNAQLZ%Mkx6!%98P1O
zgm5y#*dI)5y$TRwS;su9f4aMa!V1em43_qr0qk}(C);;396#@7q!Orc+b&k6X+9Z$
z{-o&nw*?D~H*WoR3tCsLoR*O$9nO}n3?YIQHfZs0lCb6$e*@()at%Ezen-x%W^G}=
zwq<-DWvTyP1dpD4DzL);A0BpU`CqTI-`(5#|CcDf?|avj$03~9e^f6)uD$Z1AW2iz
zo^-tgHHnEPbEv~OjKaX@O2VBx$y?cE&NXey@r<vaJYrc~bId{6P2AsmDn*OT&e6-}
z(TjS=L6J7PU3p@1!(V6K-V~CitLIVJL{4QUhc$RVa1<Uf7(g*qQ)-^Jz9FAeU)ZWQ
zc;SWKGdBM*CscCAf9}E90Z=zWUgy|8?3A!~AWRA1h_S^hEc^|8XumiZ9b#G>GL+D;
zW;x6n%*U@DG@REpuUcKAHK)KujQxrxm{N_QLWRI6&u(Y+^&nT$u{ma5THPu=DHw*}
z@a76h<ngRiDyfiEPmdW<%FRqomBz%+cUgWUsiqNOHZa~$e?4yEr-b0mCtZQ{O1e;6
z^o8Y~p+hAo%P(P@P3LO4`sG<gS=)jtt{luytKj}VT-92WQJ!(kOh}GOd^z4){^Y3F
zT6pLiZb=+VRO;x5*Y8eFE>HXY9~&AnBr!_gY6um4b&EANuVo_0Cv~2kJae8Zb>JZ3
z5KI6zKY<d_e|25d7o~H#RZ^Uv;gy{cz{DOe+4GtOnYvRfqQ{Pp8i$U1!xw6QZruQ7
zl-O!}Jr689>bzl%UHBV#uAtpsnc+fc1@P=wPgNh#!3tEpN(HNp*VDkNt}R<Q*V1zB
zYnq_Q^wF+bXy7n<KNV6RH9N^Fi*roBy1b6s<f!*3f8D9lev0Zmpd6+w*Q_U~PKDc*
zn!|@`9d$9Ge1(#jCX1?}Fv_eu7hL15t_miVbV3=9FrJ<D&Pzm6GN6oViZyuxkT?$E
z_g4Sk{i}B;AI{EOe^eR}#>CA<LHtxjgb{aDt2WB&wKua`w&Kl>*Pkp?(flN;CZW8S
z3CJ`)fBNC|`NxyftFx0Pr;I#K1?Bqahu6pbv#ZndlZ%gM=bxIIy6uZu<1#nyX^~kq
zbhDc1r}LxwhTiql{ANn|(RWTUrgDi?YDeVjhKXECO=04_6iHoS0EQG<e2K%wn!L{0
zpGh<Wvlb?BHI7`Cd~=k_IK2(q?PWgCc(Db&f0?Bi?jUkACs#xx*W#~QT`GkZkzgTw
zI=(2?ExFiZ1w<&zBz_u8RAa$ncbGaaW3AJlQP*XgI+wPD4Li}MI?Ac0gq<KG(>_Lm
z$0~%~PNhvAEN0c+YITZ|inzJ+YDb-lSj`o8xw9^<()=O{+~2nifyQo9q-2!)qSj9|
zf2Pu9PlVM?=q0lavo&cB6i!wRY41`InXQp!+gsFx_2s3fDTZ)j#Utc&Vfe<GW0LBr
zy=HT_8B(?q|8bR+55;rgKb`$fr;h*Z9c=G^zew?YzXJE<_XUe9gp+QL4juQ;-1*+a
zKu|U6&R`p&HHpTT_-96?$$*NRX3pk*f2Bi=rV+yrBF5P*lncX>((V>yZ8x6ZrVAFY
z%jM?m!)ZFk1SMf!b>saYrOKr|+kB`h*Yw^~h82Qed;K;oEA8JT2pir9f7t%Jox@(u
z{=0|0z3u()7bzwDmtZ1zAD;mKS{->_;5SQSqOq?f(KwnqA7O$!<)hzhRS|^ie;4EG
zY*y=w@b7}~Wtrep@Z*{wo(nmy4f73P#ycP+9Z^o01&1TSxyuIOMr1680m49vYvdN?
z6qzp50Of9@Y=9y^4g+35Tdlxf3}^jLAucQA?-JayGk-Fy_263_4*^|^w`x}cUkzOr
z73hK8HQvr0RZ$|5B!tI{XoU}Jf4sI*R)~D3HEU(Tdb1xp`r-A-<=N-c%d5-NpRf8K
zkAJzkc=zd_KQ>ZHM2ttxq-yr~#QppJN@J^P_G1lj6EQ4Bp_)22V?xWfzV^MaS!(IN
zE}MoM^_Sm%I=!+0*!jB;r!NM9tpS!cSi*~XlzHdMGCxeB-1Mp5sbS`ie}vw@0igVg
z9t;>8hgImgi+<k+ZoY-OAD8TGLGFh@?#)iNp4mBnZG8Q4uKn@gc%yKh28=gl2M;0T
zALX&VVD$e7u-|0fSH-JWYmEiVV*g|DpQZSp9FWNWGM7MC;Qzb5-TM8{?p}9`|G!A7
zp+)uUbnXV9e}C`Q4+>@{e*^tWmj<BFC{aoKjbat)MfHXKFAN<Tj%#lUROV_KDa|lH
z=x|r>E(OENd~Iuz>9LUXFKch5Gm;0<(aMDJR-2rQl`qoSm%P`Wmdu!Q#6FOe+S3VT
z65l-EEjj$(Tj}f!C3oO?qY27^Z7@RJdJ8Q^mHlg9pE4huSj?x`f4C~N{hlyj#0X8+
z9@T-oO=DG$rJ6?0TSSZ~wdOq6oD)uv>nBJqpUqonrOSp}J*`Ml6QsZBgf=1=2_a+3
z%NEcyhPB)05nAKwJ9xTjyg$788Ar*uf1*65eDoYPUb`pj5AvbbKJ&;1|G`M-M&9UU
z=NZ6byz6@Y)p(<Pe@nIK5})qhV77`62zvVl&<mGZ{uhjqC3M7v#4k6-%KIO^gN6V9
zwYz=)=S9j6To7$c*1oafR^I)$i9tr0aa)j*=$edB1>O#P8dC)-OD);~YK)A*h>3wa
z9Ho5p79=vF=>+Y*r}Uig*xLb)ZqEv@Q;9=*i?KUt`>!7ZfB4AR)czxk)UjlC{lF;4
zzza_LSA8ucdOL6|l0<O$eB6haO63J3s@wLrW8Vt~f62D}T|5|%+U8gBRZVz%PG~@)
z>nyeJzAEocpl(v{O)wzW-kU%tsrTl8y&d>WBo&#0vy)Th1*sIqL3;s>k+fYqDgNUH
h6BUUV+gs1I6)oGcE#E--zW@LL|Nr|w+AaWC002xih_(O#

delta 3378
zcmV-24bAd^9GD!CP8nGNdFUkR++e0@5O;cUF&G52bZqm6B6UfTXGni{y9axFyZf&?
z-M!9k=M{9mAP-ARrZkbSIvbBwpWHW6NJ>AWR8;T~CS8xD>Fg^b8kP29RFR~qw$G0H
zXK?<$4<}Y-U??Q~nhj8L)Tlg85)7fLQr=`nelO?*9q((;cw5S)X8#kyGE`sK0j#k9
z{cdl;{(A?9Tl;^B5@ml%i{v*lK&C>tyZ2~9Mi_bk0DP$22U8@bLQyT`G=xzk11j3r
zKPg{nGNOFsD?0L(7Ltsx&4(&w*@*I4XH7;SM1&JLojpr4#x4Y-(KLj!;knQk5*2c7
z8$^m;NHL+tbD(VILgI)jEvLctPs*@UX2Ga+Iww$NWU?D{gU)|?j4(Puj!IofF~G<3
zQFKpD_Zk<y;9y-YxQNlY+)FnYd7?}Vp~Bu}L27}o{dM^A6v_#W@Ld#%jBCSBB#~$g
zLCXwb2mU!mZa=?;ye$ydSiuct3<j8YiESjAiY$OWYS03Pgee3%G!Nm1aQiS*XueAj
zH#{)o39hAJ45fdII((@7`7>V;*nxABAc!IKa}IKL4Y|_rLK@<+=g9$y>QnImTx2uh
z%yZHU%MXJ{(OlvlKw{`$piHPT+NVP393CEe-Vlk-q*Ws1WWex!{}(B;w2*E-l&d@A
zjB@-eSZ2ns((t_NY=8{)36&wVCq%Xx9kla@o>!8_jJbbBsd!dl7>$Sup=-Wn{3HKB
zlr~ay12wAs7zxwk3n6s~z5hAb@0n&|^czl)g|P1d+z5G1`RIe0zvZ#j)=Ap(0Aj9+
zS)SmKWK09>0GSZV%w)lZomu5uIA)n)=slH6|C8$RKZMffSgY^=v|uQSwqmwi`f!cY
z5L#BzrC@&;T+i|oV-Sg*Xe(E5k(%DZuzGq+l~zRs4u=@&5L)M=AB{227`E1;p9?x=
zgyXZ1;%_vJL?tpAVJ^95m&<5Ebtw!am{>=%*XewqUg3cLlc6fNiqb5EZYNpj)+>57
z`qgEFbvGQW6v&nh(c54M&n(lT&6%gqsrw1J{hfc$=s07p8sr*QyxVL<jk;7*n3r9`
z<q_~JYR&E@TC=kQmpDX;JVFzW1V<Bx5+M;3MiRBkqm&6vaATsWiN=(Vz-DR6kdQbG
zVXSqk!gjmrC1Me&wkGOY8HX{XqfDZoir7X2LOIH|q32s-ek$pNXe`o#Y1`Y`aoONS
z##kWVF%-fde|kIM=c?YyyBaEv<<@q8_f3`B{!e3)+I@eMFa#Aw{%&u(|9go7pT<~6
zb*O?7YHj>Xj42aSjEy6*nRn!3P~dr=1Vm$uuIs&15i3xd=uEwZlp#@Qa?H^40E~Z%
zGy~r^{zH?C1VjYS!Cr5Z(*!Di;ot14&F9FT8Q6ArcRs{8q#U7T_Qj@I3;cPFO@9M-
z%3#el`0Nlz)AHj4rKB;!-)1k&BRJT#A8FFhhC_M_Eq_i7d2ByB)|dsbEQ&BjmdsOC
zXynT^cf{OhleLjFt?jcYSDNt1WI9a_r?F2$I2mE=52m$V1p=|GW1dof-Q7W9g=HZI
zOZ&|Lb~~Dr?YkL{pLa7-3Dmf47pu}VpNv0$QuO@WA_c}9xBj~Yt*cf}%Se+BXG>Rx
z5Wxx?wD=cESaXZNf$|u+hMpC_BWG5#wy<B@GQN+p)c-FcM^8Q#SmFN<4?DH|uh-e{
zb+`WiC5rF+-ZkZM2q!jw)k~0TuY4#-(p0r4T`xgRVxq|$=P(YVFz~sOaOY0)RyLV)
zO`CE&<0~kSSQghDb5M2@_xGMk(ZaHG=(2hAqTX>(q>XM%o|xS5x0$y$g{0}~c@#F0
zQ<=$O4c-qNg+~kqP)ya7ny0Pr#^=-*_UR2?c%k=<&7bCkO3v7SJs3Om=|;%w9N34Q
z67UX$DFGZYwqS+DzJU+z7l)xkOp6nS5){@fhgpO9_|;Q}^Sb6$t4p-z6u5}7U(p0p
zsxefk5E$jz?X12Y<Vrd=2h2;WTcsxj!w?+UTp@`(o^?tk6_V=dF(XR3nW?GLnE3fF
z%a0`0G$PCf#v7`C$4&f{;Jf*xE0|tM7ix>Xu-r3fsDxwrC1A7ZP%T%#JgX>cTTlg+
zgZWVv+~0?*T5B@OGme=F$x(?f$6L#v9Q9fY4}HTeiDQXM9sTh7-O0)2X}|wtLqmon
zM(JA(p@Oe&vBu`LOa%F)&a;ze&Qqlh93C8k3BcwjP$Ig2u8aDjbSSq<it_`!vNHmh
z*s~>jShFBgcZ5as*zr;0&~b10LhaA38=wpkTWzoBfn`UXH>|M>e*@1IwA(8)TnMc|
zo&D;O>H|7h!KqiNV72jj8d%k}Weew8TCROf6BL;~+Eoh;96;}<Lh7StCs}224(L~x
z*HN1s^&X{vJ5}0GQJn{r!<6Nk^#s+aaJy1-_)x8*E+&+(P!iK*Q8g4snRVxaYrNG}
z!K9K-D8muPvxDAwiAYKYlu=EwCQkqo$07XD>i?^M_3q@u*?H^FN&~`}xVb2ZpQ?y3
z;;w4dMp?b~W>(8qyxH;klVvKJA4An7l=m_LnZ`$dKfFHwcyfAmcGBdOk;kc^Tp#`L
z`nZ2~b$Whs@$u~ZQ&Us7eKBiX=EglOGOLDeRulbneoo)eyMC14OesJ2&MC%JE|E&@
ze0<$7kxQv5OuUyOsVfY?kRppOakyBM*E#z$iDqEd!UV3yk;{^Aj#3$?w_&@z%;y;|
zwxBnEvlPRfLT={difH6o{8g(<rO+Z0EQC+T7p1x-w|cCA2xXbXPh*K{ELiMLQs-r?
zb@~hHx@=SD(w4AcC)!j;In|V~6J%uC$4Ky4g|OSHw8?|Tth!sRPEk@3H+Np`s8bQE
zx#BK&)}>XN-$H@=`?ev_*iDL*jB;Pp`kBUmRJ!bmu(}DoWVT_pCe4Au$*LjkT`D58
zHL`4bi<+>$y!1515KgRkMCpFqgP|0YR8Q?4o4d`BvX%IctE7A=o(uo!>~}hK{AcfQ
zd;j}IitqasxF^3XSll0+baQm*xPRu(_Z|j<s!?|a+YqfuG`__DWK^0AsJLe4Z0<LI
zI>cxiG5jE6oLxb=Ff1wUu0Ymy<M~y(VDYY8Zq7cOrejP{66RGm-Vai$+{m-dhpKW%
z?>%K$A^5e|Z_~2U{!N0g;eGIj?Z4YO?A7eQd)V9G-P-?4loI|+FcG|uPk?`|jyx~$
zo24<)*w>P198H~%Fu|Sj(eJjZ2*UM$TXA(ZtMx_rcR~2FOz<iAaZM1<g&fz0`35lK
z9T1X^C@0K<!;#?JWrJ`dG8V%CVIajda*J|`OqXeZa<@@7K#?DZ0WYAfR^Ts&vwo)#
zmlg7N32xb$KN;3~@Rg2-fUd<WwJU+IhAxW=^uX>KZ|9DxD3M4K!sA7>!iP0~-dQOt
zM84CSwX$Hn*^eFl@cQKP?DOg6)#d3gSN)I2zg}Iu`}B_=8>u8B#-nCZHG6#G{(XO?
zu~jwuu?Dz_7?z??O&yytq2*g&`%>5}wRB&XO~Z})>+e6GUReO_{N0Ds7lXjo081Mz
z;YB^lymMulA0|<5`c&`KF!M)$Lhs)IQ2s>^28@lvD)ih%zwZM#-$LDwOLn#(_d_7}
zW+z+E?3}+gzWzAZ{&;Y_Q8-Tn#+$N(hmi7*^4MN5`u_viZ!+(z;=QZ2#)4(B|FQVb
zQv6R2NaTN+OQ0+8|J~kh{r+cnueZhjU!>H~qWX0@cZ1KrzxV0~1+$ZXfqtb+15jv`
zsHFWyv5NGf`nLWTh7JwKwKoMSbG3|=W|$vzxT|-Uf?;L8wl&H0SV;PpwYSn4$%E)<
zWx{x?P0q#27wPO9-fK@wX3RNaA4p2=>4Y+gZ=Ua#9R44zbasZ4JMg^G1m(as7@=;x
zg%+dA{<W`9nGa4Z=2L8cTou}WPZ%&_geGf`>OkJ6v8u;XO(W+mB1V*2bDnF?2`9+)
z6C{_<<}I|+Wy7tWR-~v2(qD8!8xf3zkTK<D3uqd{+U@fQt#S1oJl!<jpWgh8qh#Da
zQyx=3dJY?}-IMhP`A}=0d1QlsW2AE<Z}hVB4B#=|bv^%TyivY?rCM}}Pxo&yTg3+i
zy?q1dg-b2}3&zM2I^sg&mm6c{{g2+k!vFu;+rIzvB4r0Ih&Co`-`H>~@BY=qAfwE<
zEl5dpO-85!ZwEe&sREUy7VQ8vM#f;o#K0YnQa*YM5*g8Sf_C3idQN!k?Epu&XNA|P
z#38-K*qyZf*N*{zeB^9u{|iRySTehQV3cFv1t<Nhz7`U_9XJ+AA~<|L?n6wa@`4f7
zZTs7??*)UuWZV8O9*jqA^Q-u(CcHf-G$7G+mfCk;mG>r4H>vj~7?5l4O`wz1d-K2E
z4tyq(icG=T$*J;!R0`vuy@19@+OC}x|Mr53ibRa<t>@YmmTlRVZ=n2N00030|BRnL
ILI79*0P6j=H~;_u

diff --git a/charts/latest/csi-driver-nfs/Chart.yaml b/charts/latest/csi-driver-nfs/Chart.yaml
index 40fa2ebf..c591d76b 100755
--- a/charts/latest/csi-driver-nfs/Chart.yaml
+++ b/charts/latest/csi-driver-nfs/Chart.yaml
@@ -1,5 +1,5 @@
 apiVersion: v1
-appVersion: latest
+appVersion: v4.0.0
 description: CSI NFS Driver for Kubernetes
 name: csi-driver-nfs
 version: v4.0.0
diff --git a/charts/latest/csi-driver-nfs/values.yaml b/charts/latest/csi-driver-nfs/values.yaml
index 4c9acd21..da1888aa 100755
--- a/charts/latest/csi-driver-nfs/values.yaml
+++ b/charts/latest/csi-driver-nfs/values.yaml
@@ -1,8 +1,8 @@
 customLabels: {}
 image:
     nfs:
-        repository: gcr.io/k8s-staging-sig-storage/nfsplugin
-        tag: canary
+        repository: registry.k8s.io/sig-storage/nfsplugin
+        tag: v4.0.0
         pullPolicy: IfNotPresent
     csiProvisioner:
         repository: registry.k8s.io/sig-storage/csi-provisioner
diff --git a/charts/v4.0.0/csi-driver-nfs-v4.0.0.tgz b/charts/v4.0.0/csi-driver-nfs-v4.0.0.tgz
new file mode 100644
index 0000000000000000000000000000000000000000..1b373e99e7914297b072579f60c0fd8e736ff364
GIT binary patch
literal 3583
zcmV<b4FK{ViwG0|00000|0w_~VMtOiV@ORlOnEsqVl!4SWK%V1T2nbTPgYhoO;>Dc
zVQyr3R8em|NM&qo0PI}dZ`-(*@3a1jv(7wpx|RHque$>B&`Hv{!A#R2?)2hfFbHVr
z*yasIYDmh7CzJi#7bGQHlI7Tmn{<nsKoVOd4-XH|7k{J@DeA|PPEh)MsM^P4B6Tn&
z348VBN~hE59PI7cznxB}{<qUT=)LOh^>+7qox}aZy;q&?UT1gr6?DEJ4@*m?G?A}5
z8;@0=+&5B4N<X7iRPYccU5}*c{OexO2|8YkDv~tS_Std&49?&8;l!#8426VWvH?nt
z8kNUMf+18@%A3^aeeD@<OS#nSe?nM>>I*x7752a1?H<<czjt`Bwf~nWQKqy=ekB8B
zDulaxk0xY<p$7oKhsu30MPe!x)k01~kT{}B%V}`^4;4_+R&?YmEhHIXn-5jWvJvI8
zo|=qi#$P;3GsZ3iqtP^kv*EeW7ZMe6Z5u?2UPv*a#%-W{JPSsr(>Z|}BfCL&T}Bw4
zAV;Mxq!{4i`6#-lrhAQxUU0B37hJ^X{OzS1j66{$hEQSbvLLm<*Zw+uc?#u(M))p@
zM8>t@Cz41shM;AJumk@ZBe$R5Lf#gLYpmdgG6n<8yTmq(OhpzzA2nzJL&6jS9h!%5
zL%4mIDKy_Dh#MZ5@dVdWFox2F96nV3{F$!^?7%rm5X2DrIR`nrhFocQAr0}^^W=a;
z^{IFOF07eY<~iww<%dC}XfAONATjhWP$pCv?NcFi4i67KZ-_)^(kc;hGGO?=|FaZX
zT1Yn^%GI55Mmc^KEHh(RX?WgsHb92@gvt=w6C&G;4%+!c&nrn|#@wP*JgYE_Mnr|s
zHQzG+k$)gc8!5Vh8r6P`gz52xkUE6k{~YZ1Ofxb16(`6-*!KW#guJGF^uf&E^4MzY
zByD*BF;~SbPjE;wrU7<<ObBIWvfyIQtnw`!v&=B`o=T<vMfLcfLg{m?Rd@heFqA}F
zF<UNuxW;J+Evx8KFbu9|$%!$D#7?x8tG7r^Z(&$Hy`@U4q5_9QjC2UCbJ35+7-tMy
zYthdIoif7l*+=m=8b+cLnT#-(T(iq%G@-f_0}@QEquJ|pK2Wc4K!0Ya%B`X_3!&Rd
z7P|F{UX6Zr*<jrb2P;LfWkd8f7{W8lv}kkY>2vCSLT-QKGdj+gs|LA-74J41QKK%^
z6y{}@aCrp$idwU~iPr4wz$Fe*B9G97Bf-(cp+raog^@(9@+f6O6Wo|+YN9daBd{r&
zG9)ApLl|qFs<7RzdWl#>s;!B-R>olr=_r%vry{n|fKZOIZRq)yn4d~IAsUOcVA}R}
zc3diWkulbH42AIfAKni5xvIDFu7-+ZxwYNgeQTw*|I?VHjA&Ht^N*iS`+>gIn~$*y
z|Jm*B)%Jh;`@8$w{ohLz_%y~kszViwP;29AVoaHsVr+boO}--+h62y~Bp@1NbY1VA
zidcctL}%(Pqzs8dlV*mV2Vh)Oq#5|WaUm)t5gy&$L2!w-U2tAJh5LKMgCpkq3K>RP
z$fK5YEf;#h{e263|Ay#j{IzBJEtRGAe>FyyqEvxSH-&;$*nhXTTgQJ7_Ig|Uf01%`
z*M0*NnuMTG!;mu6(-e;qBbI24A-rkd-+P{Ic6yr<9)ljE%>c~C+I)`enSpJ0cjrTl
zL&_0aW@~JkwZNa(*bF#urwrC?gU=3eG%Y_)P)Zsj{B5?wJc5H=`;jL7Y&fL1(DLWR
zkjM73V~tq=%K`~wWXU{Rg+{(yb4Sd5Hi;Wa)7n;xa-|86OtRDDa2oq0gp(1*{$N_`
zRe%u7I_6o`-5nHGSQcWiwBHP1x1%}PzMJ9rc{d}KK#kjWu_{gT$@udpMbE!2SYW(y
z>%Uvjx@zULj5O(Rwsd6(5v;I5i+_`ZHMjU1D36hA=vnbQa%MGa3;VS#<NGK}{r@6(
z^yE{475@M5uv5$bdY%2=-q!!WMDcy!yQVx2;l!qT33Ba~4+Tk@s`jMoC8$YEG?_yk
z#$gl&K35X%+)3WbCUdT7Q;uhR1?3UT;+kU)%5LKR-cu=BWOj~THjiG^I}VDp(e26;
zlN<gz^Y*5YG+jN9!X|PmGdZlm`+=kIh`|7gshU#rwDk@7och96y}=7F^q#T#k2#@|
zGj<Qg4uHB5@;b-%VW)(>17S)4M~p3AVc~D!L;J<S=n&K5kfDTzHOpbvU_O5Jpy9l(
zdDZF?tvLlQV(eEm!IWwY6)FTqd3HOiuLrr3j?FRi(&|>}Nx?7#hc{P9B9CXCQb~oR
zdV0)=Qf_8ysx&5kzRU6>Ni~fKvw`u3>Twf4B?NCi=?bh@(uLZhFD&;A9V$UtehJ%b
zI#<ipFV8B<+7?uC<zRkV1^4&is@9r}@{D6<LUL5%%kkFoCr7>3!b9J1OX66fQb#|$
zes^+mdD`#)*wBz6iBbAiL#W`ZTdc8pEfYaLsq^gQne$Ys0|yC*U;?oD36zMg>!Q9W
zoy)C~;`|J+?2G^=_ISyj*DT1?onjF^c6`)0ble-hQ2TT11}LM%R@>`&VA)aU4QuSe
z-@tPP?e@wH7eXt5XTN%?`hX5rpz2jBSZ%zX23B=#*}}P&mTO<r1VyHgcGW@yhtd0~
zkou_ENmf~$WBS$Qb<`$Dy+`RzmG)Cq=K<v~Ww~ZOL3JwJuGAbpRO_gV3FRx4#57q{
z4TVu=-MQczZ*^5LsiYIiaD?&ftan}_l9B;sR8y?U6M)2V2*0=b|L$MCJNa;S-uk1`
zfG{R*E(+qODk6-yt6H^DR<FI8)v^_DcD(*%nTqBoQ8fwWy-Yx+@zD>j&p)1=UY(sZ
zIc4N=Dk#@SKfFHfpIx1vpIm%AJO9+w)NNnP8kf0oPm9c|p_|o2Kb;@dH}tNb<~LKy
zkG^w?F_lZCQad7FH%#PGY6=tYrAX=u12Ck>;!7MZ*5q~0{!F47n6)s0t8wJA<eQ^Z
z#_4U?ZZGqB#)~cJ%`C-m2a%gOxgr|57Jt?1QYo~E1PkHQ@kOa_$;BQkAVOIt@zYqM
z8VeS?!_;{hYn}d#x-Q$)xwIv0*oijPQBE}_>;xH^_AwGXRw3+mDsA#$F{|!Yt5cLz
z#Lb;oJL*)#YOc7;opouI<`+@m{=RJpG<K6BC8OLIwSJ;8l`eZCtZqUtnQfS@NpqlZ
zvT8_smx{=2jV#;Vq9&{_FFj2$gcB<sA*Tz&H_jZBR8Q?So4d`BvX%IctE7A=o(uo!
z>~}hK{AcfQd;j}IitqasxF^3aSX?2TbaQm*xPRu(_Z|j<s!?|a+YqfuG`_??Gb&96
zRNORkHuozXVl<5yeh@LvZlPQlmXvn4AZxqv{5D;%cwH_xXCF?}F(xPp^Qs%~2Psu9
z<=N&#Rk^13o-(Wu{MzfcX<2FiCPCQnKKR4--|ZasYWCkf?Co#wf4@j6;lBhE!Tb0G
z_}A*l^8&wF8WW9uEs4g_)cFV#+$kUZW~+)IT)!AsXR}&ggnt)=FUtg<f*;oe@m$Dp
zZJ2KWGu{Cq>4<W|EI1qq&RsSLHzH#(3=jrVTqCzAr^s}f1}JwMWdjuXaTxFd+G+*<
zVmRw}3UOH>f0y8vo%xettq0%gcnIiPyj8mr_-g2~s6Y?wuJLy6sEQJaBq2OrL@Rt)
z<F%EtLgYKGSt|?HoBi0)53f%y&pw}CUR|F4eAWMW{L9tFyHEf8v5`t5VmxXlRkOz@
z?%(%U8e3JfA8UY{h+!!T)zq;W6I#CYweN+^QcL%B*)-g!zx?*o>6Hb*&fk4FeK81Z
z4Y0Jq5?<7!%sW?>`C$^}rcd=w4Ksfv^!^P1<zMt*z}PsfLeE|F`#x~<E!6$EWM>O<
zKLm1bcCz)%&iQNO>yLBoj|ayah4VCEyeT_)2r2(4kL?Ac|385JCiA{3UcFjtELax%
zAB+Di#sB1hME;k#1iAwM-|g+z?|+(aTm0`ON)0WlU#D|7`272OuYOQ4I~nL#x-<ZV
zMu|$=ZxpLYFRCx>e_`m*a9n#+pfXp>NNI-oL5I6~cPSWF=4)G%Opk@6e_4Agosm3<
zj#eg&x7y@ftbCEqzU003v}DGdBldx$)SgZ#llbQOZpq>Q-b!a@D7gdA8%<CSY=aT%
z)>~*Xs_b9;`jq+L#9}_h##N#1_k;l>MrgA3s1D?98moFN)iiS6B4R|THRrkJoN$6%
zKS6T&Y~DgET{hh6X+?^fApJ!rv=PBb2pLmewt%KFtld73&>C0Y!P8CS{o&2eI7-I-
z6Xh}Gqvx>k+C5o+kPo%?nMXGG4@NpS@<uN^&j23dUDxxk#vA2ZszsOhbpHmkReV6u
z+c$t-xYY8$V2muGBQ7L<xiMDW|L7eo{Qs}L?fXA3Qg+~iXk)VWjSaW*?!Qe8GRlnG
zf|NwpWP~d4cHq;PDo|N!(GE~!WDG`34BX);<)gPCkr7QNX!kv(=Y+@J4sdjPR(PFC
z9MW5i-AUVj{TRSU&ZhPsVWf^Fv+D;&IR;*E(!c6!A<^4`W053+!{_5Z#8fIT7*XA}
zza9HtF!)Qh?eF5jc+@t(imz(I+jBw#5?yDhefL#)Zvu6bdT)XOx%S=!I!V1Z|Lg6*
zXCkS{6r7!$DlbT-Fb>)aXpE%o+DY*rFPNxE#Ms_?u5H<tZTSYu{{;X5|Nq$pg0lcv
F007@)4e<Z~

literal 0
HcmV?d00001

diff --git a/charts/v4.0.0/csi-driver-nfs/.helmignore b/charts/v4.0.0/csi-driver-nfs/.helmignore
new file mode 100644
index 00000000..50af0317
--- /dev/null
+++ b/charts/v4.0.0/csi-driver-nfs/.helmignore
@@ -0,0 +1,22 @@
+# Patterns to ignore when building packages.
+# This supports shell glob matching, relative path matching, and
+# negation (prefixed with !). Only one pattern per line.
+.DS_Store
+# Common VCS dirs
+.git/
+.gitignore
+.bzr/
+.bzrignore
+.hg/
+.hgignore
+.svn/
+# Common backup files
+*.swp
+*.bak
+*.tmp
+*~
+# Various IDEs
+.project
+.idea/
+*.tmproj
+.vscode/
diff --git a/charts/v4.0.0/csi-driver-nfs/Chart.yaml b/charts/v4.0.0/csi-driver-nfs/Chart.yaml
new file mode 100644
index 00000000..c591d76b
--- /dev/null
+++ b/charts/v4.0.0/csi-driver-nfs/Chart.yaml
@@ -0,0 +1,5 @@
+apiVersion: v1
+appVersion: v4.0.0
+description: CSI NFS Driver for Kubernetes
+name: csi-driver-nfs
+version: v4.0.0
diff --git a/charts/v4.0.0/csi-driver-nfs/templates/NOTES.txt b/charts/v4.0.0/csi-driver-nfs/templates/NOTES.txt
new file mode 100644
index 00000000..19e9a2ea
--- /dev/null
+++ b/charts/v4.0.0/csi-driver-nfs/templates/NOTES.txt
@@ -0,0 +1,5 @@
+ The CSI NFS Driver is getting deployed to your cluster.
+
+To check CSI NFS Driver pods status, please run:
+
+  kubectl --namespace={{ .Release.Namespace }} get pods --selector="release={{ .Release.Name }}" --watch
\ No newline at end of file
diff --git a/charts/v4.0.0/csi-driver-nfs/templates/_helpers.tpl b/charts/v4.0.0/csi-driver-nfs/templates/_helpers.tpl
new file mode 100644
index 00000000..901a53f1
--- /dev/null
+++ b/charts/v4.0.0/csi-driver-nfs/templates/_helpers.tpl
@@ -0,0 +1,19 @@
+{{/* vim: set filetype=mustache: */}}
+
+{{/* Expand the name of the chart.*/}}
+{{- define "nfs.name" -}}
+{{- default .Chart.Name .Values.nameOverride | trunc 63 | trimSuffix "-" -}}
+{{- end -}}
+
+{{/* labels for helm resources */}}
+{{- define "nfs.labels" -}}
+labels:
+  app.kubernetes.io/instance: "{{ .Release.Name }}"
+  app.kubernetes.io/managed-by: "{{ .Release.Service }}"
+  app.kubernetes.io/name: "{{ template "nfs.name" . }}"
+  app.kubernetes.io/version: "{{ .Chart.AppVersion }}"
+  helm.sh/chart: "{{ .Chart.Name }}-{{ .Chart.Version | replace "+" "_" }}"
+  {{- if .Values.customLabels }}
+{{ toYaml .Values.customLabels | indent 2 -}}
+  {{- end }}
+{{- end -}}
diff --git a/charts/v4.0.0/csi-driver-nfs/templates/csi-nfs-controller.yaml b/charts/v4.0.0/csi-driver-nfs/templates/csi-nfs-controller.yaml
new file mode 100644
index 00000000..1c070d5d
--- /dev/null
+++ b/charts/v4.0.0/csi-driver-nfs/templates/csi-nfs-controller.yaml
@@ -0,0 +1,110 @@
+---
+kind: Deployment
+apiVersion: apps/v1
+metadata:
+  name: {{ .Values.controller.name }}
+  namespace: {{ .Release.Namespace }}
+{{ include "nfs.labels" . | indent 2 }}
+spec:
+  replicas: {{ .Values.controller.replicas }}
+  selector:
+    matchLabels:
+      app: {{ .Values.controller.name }}
+  template:
+    metadata:
+{{ include "nfs.labels" . | indent 6 }}
+        app: {{ .Values.controller.name }}
+    spec:
+      {{- if .Values.imagePullSecrets }}
+      imagePullSecrets:
+{{ toYaml .Values.imagePullSecrets | indent 8 }}
+      {{- end }}
+      hostNetwork: true  # controller also needs to mount nfs to create dir
+      dnsPolicy: {{ .Values.controller.dnsPolicy }}
+      serviceAccountName: {{ .Values.serviceAccount.controller }}
+      nodeSelector:
+        kubernetes.io/os: linux
+        {{- if .Values.controller.runOnMaster}}
+        kubernetes.io/role: master
+        {{- end}}
+      priorityClassName: system-cluster-critical
+{{- with .Values.controller.tolerations }}
+      tolerations:
+{{ toYaml . | indent 8 }}
+{{- end }}
+      containers:
+        - name: csi-provisioner
+          image: "{{ .Values.image.csiProvisioner.repository }}:{{ .Values.image.csiProvisioner.tag }}"
+          args:
+            - "-v=2"
+            - "--csi-address=$(ADDRESS)"
+            - "--leader-election"
+            - "--leader-election-namespace={{ .Release.Namespace }}"
+          env:
+            - name: ADDRESS
+              value: /csi/csi.sock
+          imagePullPolicy: {{ .Values.image.csiProvisioner.pullPolicy }}
+          volumeMounts:
+            - mountPath: /csi
+              name: socket-dir
+          resources: {{- toYaml .Values.controller.resources.csiProvisioner | nindent 12 }}
+        - name: liveness-probe
+          image: "{{ .Values.image.livenessProbe.repository }}:{{ .Values.image.livenessProbe.tag }}"
+          args:
+            - --csi-address=/csi/csi.sock
+            - --probe-timeout=3s
+            - --health-port={{ .Values.controller.livenessProbe.healthPort }}
+            - --v=2
+          imagePullPolicy: {{ .Values.image.livenessProbe.pullPolicy }}
+          volumeMounts:
+            - name: socket-dir
+              mountPath: /csi
+          resources: {{- toYaml .Values.controller.resources.livenessProbe | nindent 12 }}
+        - name: nfs
+          image: "{{ .Values.image.nfs.repository }}:{{ .Values.image.nfs.tag }}"
+          securityContext:
+            privileged: true
+            capabilities:
+              add: ["SYS_ADMIN"]
+            allowPrivilegeEscalation: true
+          imagePullPolicy: {{ .Values.image.nfs.pullPolicy }}
+          args:
+            - "--v={{ .Values.controller.logLevel }}"
+            - "--nodeid=$(NODE_ID)"
+            - "--endpoint=$(CSI_ENDPOINT)"
+            - "--drivername={{ .Values.driver.name }}"
+            - "--mount-permissions={{ .Values.driver.mountPermissions }}"
+            - "--working-mount-dir={{ .Values.controller.workingMountDir }}"
+          env:
+            - name: NODE_ID
+              valueFrom:
+                fieldRef:
+                  fieldPath: spec.nodeName
+            - name: CSI_ENDPOINT
+              value: unix:///csi/csi.sock
+          ports:
+            - containerPort: {{ .Values.controller.livenessProbe.healthPort }}
+              name: healthz
+              protocol: TCP
+          livenessProbe:
+            failureThreshold: 5
+            httpGet:
+              path: /healthz
+              port: healthz
+            initialDelaySeconds: 30
+            timeoutSeconds: 10
+            periodSeconds: 30
+          volumeMounts:
+            - name: pods-mount-dir
+              mountPath: {{ .Values.kubeletDir }}/pods
+              mountPropagation: "Bidirectional"
+            - mountPath: /csi
+              name: socket-dir
+          resources: {{- toYaml .Values.controller.resources.nfs | nindent 12 }}
+      volumes:
+        - name: pods-mount-dir
+          hostPath:
+            path: {{ .Values.kubeletDir }}/pods
+            type: Directory
+        - name: socket-dir
+          emptyDir: {}
diff --git a/charts/v4.0.0/csi-driver-nfs/templates/csi-nfs-driverinfo.yaml b/charts/v4.0.0/csi-driver-nfs/templates/csi-nfs-driverinfo.yaml
new file mode 100644
index 00000000..a6afd896
--- /dev/null
+++ b/charts/v4.0.0/csi-driver-nfs/templates/csi-nfs-driverinfo.yaml
@@ -0,0 +1,15 @@
+---
+apiVersion: storage.k8s.io/v1
+kind: CSIDriver
+metadata:
+  name: {{ .Values.driver.name }}
+spec:
+  attachRequired: false
+  volumeLifecycleModes:
+    - Persistent
+  {{- if .Values.feature.enableInlineVolume}}
+    - Ephemeral
+  {{- end}}
+  {{- if .Values.feature.enableFSGroupPolicy}}
+  fsGroupPolicy: File
+  {{- end}}
diff --git a/charts/v4.0.0/csi-driver-nfs/templates/csi-nfs-node.yaml b/charts/v4.0.0/csi-driver-nfs/templates/csi-nfs-node.yaml
new file mode 100644
index 00000000..644a2701
--- /dev/null
+++ b/charts/v4.0.0/csi-driver-nfs/templates/csi-nfs-node.yaml
@@ -0,0 +1,126 @@
+---
+kind: DaemonSet
+apiVersion: apps/v1
+metadata:
+  name: {{ .Values.node.name }}
+  namespace: {{ .Release.Namespace }}
+{{ include "nfs.labels" . | indent 2 }}
+spec:
+  updateStrategy:
+    rollingUpdate:
+      maxUnavailable: {{ .Values.node.maxUnavailable }}
+    type: RollingUpdate
+  selector:
+    matchLabels:
+      app: {{ .Values.node.name }}
+  template:
+    metadata:
+{{ include "nfs.labels" . | indent 6 }}
+        app: {{ .Values.node.name }}
+    spec:
+      {{- if .Values.imagePullSecrets }}
+      imagePullSecrets:
+{{ toYaml .Values.imagePullSecrets | indent 8 }}
+      {{- end }}
+      hostNetwork: true # original nfs connection would be broken without hostNetwork setting
+      dnsPolicy: {{ .Values.controller.dnsPolicy }}
+      nodeSelector:
+        kubernetes.io/os: linux
+{{- with .Values.node.tolerations }}
+      tolerations:
+{{ toYaml . | indent 8 }}
+{{- end }}
+      containers:
+        - name: liveness-probe
+          image: "{{ .Values.image.livenessProbe.repository }}:{{ .Values.image.livenessProbe.tag }}"
+          args:
+            - --csi-address=/csi/csi.sock
+            - --probe-timeout=3s
+            - --health-port={{ .Values.node.livenessProbe.healthPort }}
+            - --v=2
+          imagePullPolicy: {{ .Values.image.livenessProbe.pullPolicy }}
+          volumeMounts:
+            - name: socket-dir
+              mountPath: /csi
+          resources: {{- toYaml .Values.node.resources.livenessProbe | nindent 12 }}
+        - name: node-driver-registrar
+          image: "{{ .Values.image.nodeDriverRegistrar.repository }}:{{ .Values.image.nodeDriverRegistrar.tag }}"
+          livenessProbe:
+            exec:
+              command:
+                - /csi-node-driver-registrar
+                - --kubelet-registration-path=$(DRIVER_REG_SOCK_PATH)
+                - --mode=kubelet-registration-probe
+            initialDelaySeconds: 30
+            timeoutSeconds: 15
+          args:
+            - --v=2
+            - --csi-address=/csi/csi.sock
+            - --kubelet-registration-path=$(DRIVER_REG_SOCK_PATH)
+          env:
+            - name: DRIVER_REG_SOCK_PATH
+              value: {{ .Values.kubeletDir }}/plugins/csi-nfsplugin/csi.sock
+            - name: KUBE_NODE_NAME
+              valueFrom:
+                fieldRef:
+                  fieldPath: spec.nodeName
+          imagePullPolicy: {{ .Values.image.nodeDriverRegistrar.pullPolicy }}
+          volumeMounts:
+            - name: socket-dir
+              mountPath: /csi
+            - name: registration-dir
+              mountPath: /registration
+          resources: {{- toYaml .Values.node.resources.nodeDriverRegistrar | nindent 12 }}
+        - name: nfs
+          securityContext:
+            privileged: true
+            capabilities:
+              add: ["SYS_ADMIN"]
+            allowPrivilegeEscalation: true
+          image: "{{ .Values.image.nfs.repository }}:{{ .Values.image.nfs.tag }}"
+          args :
+            - "--v={{ .Values.node.logLevel }}"
+            - "--nodeid=$(NODE_ID)"
+            - "--endpoint=$(CSI_ENDPOINT)"
+            - "--drivername={{ .Values.driver.name }}"
+            - "--mount-permissions={{ .Values.driver.mountPermissions }}"
+          env:
+            - name: NODE_ID
+              valueFrom:
+                fieldRef:
+                  fieldPath: spec.nodeName
+            - name: CSI_ENDPOINT
+              value: unix:///csi/csi.sock
+          ports:
+            - containerPort: {{ .Values.node.livenessProbe.healthPort }}
+              name: healthz
+              protocol: TCP
+          livenessProbe:
+            failureThreshold: 5
+            httpGet:
+              path: /healthz
+              port: healthz
+            initialDelaySeconds: 30
+            timeoutSeconds: 10
+            periodSeconds: 30
+          imagePullPolicy: {{ .Values.image.nfs.pullPolicy }}
+          volumeMounts:
+            - name: socket-dir
+              mountPath: /csi
+            - name: pods-mount-dir
+              mountPath: {{ .Values.kubeletDir }}/pods
+              mountPropagation: "Bidirectional"
+          resources: {{- toYaml .Values.node.resources.nfs | nindent 12 }}
+      volumes:
+        - name: socket-dir
+          hostPath:
+            path: {{ .Values.kubeletDir }}/plugins/csi-nfsplugin
+            type: DirectoryOrCreate
+        - name: pods-mount-dir
+          hostPath:
+            path: {{ .Values.kubeletDir }}/pods
+            type: Directory
+        - hostPath:
+            path: {{ .Values.kubeletDir }}/plugins_registry
+            type: Directory
+          name: registration-dir
diff --git a/charts/v4.0.0/csi-driver-nfs/templates/rbac-csi-nfs-controller.yaml b/charts/v4.0.0/csi-driver-nfs/templates/rbac-csi-nfs-controller.yaml
new file mode 100644
index 00000000..73e4ae07
--- /dev/null
+++ b/charts/v4.0.0/csi-driver-nfs/templates/rbac-csi-nfs-controller.yaml
@@ -0,0 +1,57 @@
+{{- if .Values.serviceAccount.create -}}
+---
+apiVersion: v1
+kind: ServiceAccount
+metadata:
+  name: csi-{{ .Values.rbac.name }}-controller-sa
+  namespace: {{ .Release.Namespace }}
+{{ include "nfs.labels" . | indent 2 }}
+---
+{{- end -}}
+
+{{- if .Values.rbac.create -}}
+kind: ClusterRole
+apiVersion: rbac.authorization.k8s.io/v1
+metadata:
+  name: {{ .Values.rbac.name }}-external-provisioner-role
+{{ include "nfs.labels" . | indent 2 }}
+rules:
+  - apiGroups: [""]
+    resources: ["persistentvolumes"]
+    verbs: ["get", "list", "watch", "create", "delete"]
+  - apiGroups: [""]
+    resources: ["persistentvolumeclaims"]
+    verbs: ["get", "list", "watch", "update"]
+  - apiGroups: ["storage.k8s.io"]
+    resources: ["storageclasses"]
+    verbs: ["get", "list", "watch"]
+  - apiGroups: [""]
+    resources: ["events"]
+    verbs: ["get", "list", "watch", "create", "update", "patch"]
+  - apiGroups: ["storage.k8s.io"]
+    resources: ["csinodes"]
+    verbs: ["get", "list", "watch"]
+  - apiGroups: [""]
+    resources: ["nodes"]
+    verbs: ["get", "list", "watch"]
+  - apiGroups: ["coordination.k8s.io"]
+    resources: ["leases"]
+    verbs: ["get", "list", "watch", "create", "update", "patch"]
+  - apiGroups: [""]
+    resources: ["secrets"]
+    verbs: ["get"]
+---
+kind: ClusterRoleBinding
+apiVersion: rbac.authorization.k8s.io/v1
+metadata:
+  name: {{ .Values.rbac.name }}-csi-provisioner-binding
+{{ include "nfs.labels" . | indent 2 }}
+subjects:
+  - kind: ServiceAccount
+    name: csi-{{ .Values.rbac.name }}-controller-sa
+    namespace: {{ .Release.Namespace }}
+roleRef:
+  kind: ClusterRole
+  name: {{ .Values.rbac.name }}-external-provisioner-role
+  apiGroup: rbac.authorization.k8s.io
+{{- end -}}
diff --git a/charts/v4.0.0/csi-driver-nfs/values.yaml b/charts/v4.0.0/csi-driver-nfs/values.yaml
new file mode 100644
index 00000000..da1888aa
--- /dev/null
+++ b/charts/v4.0.0/csi-driver-nfs/values.yaml
@@ -0,0 +1,110 @@
+customLabels: {}
+image:
+    nfs:
+        repository: registry.k8s.io/sig-storage/nfsplugin
+        tag: v4.0.0
+        pullPolicy: IfNotPresent
+    csiProvisioner:
+        repository: registry.k8s.io/sig-storage/csi-provisioner
+        tag: v3.1.0
+        pullPolicy: IfNotPresent
+    livenessProbe:
+        repository: registry.k8s.io/sig-storage/livenessprobe
+        tag: v2.6.0
+        pullPolicy: IfNotPresent
+    nodeDriverRegistrar:
+        repository: registry.k8s.io/sig-storage/csi-node-driver-registrar
+        tag: v2.5.0
+        pullPolicy: IfNotPresent
+
+serviceAccount:
+  create: true # When true, service accounts will be created for you. Set to false if you want to use your own.
+  controller: csi-nfs-controller-sa # Name of Service Account to be created or used
+
+rbac:
+  create: true
+  name: nfs
+
+driver:
+  name: nfs.csi.k8s.io
+  mountPermissions: 0777
+
+feature:
+  enableFSGroupPolicy: true
+  enableInlineVolume: false
+
+kubeletDir: /var/lib/kubelet
+
+controller:
+  name: csi-nfs-controller
+  replicas: 1
+  runOnMaster: false
+  livenessProbe:
+    healthPort: 29652
+  logLevel: 5
+  workingMountDir: "/tmp"
+  dnsPolicy: Default  # available values: Default, ClusterFirstWithHostNet, ClusterFirst
+  tolerations:
+    - key: "node-role.kubernetes.io/master"
+      operator: "Exists"
+      effect: "NoSchedule"
+    - key: "node-role.kubernetes.io/controlplane"
+      operator: "Exists"
+      effect: "NoSchedule"
+    - key: "node-role.kubernetes.io/control-plane"
+      operator: "Exists"
+      effect: "NoSchedule"
+  resources:
+    csiProvisioner:
+      limits:
+        memory: 400Mi
+      requests:
+        cpu: 10m
+        memory: 20Mi
+    livenessProbe:
+      limits:
+        memory: 100Mi
+      requests:
+        cpu: 10m
+        memory: 20Mi
+    nfs:
+      limits:
+        memory: 200Mi
+      requests:
+        cpu: 10m
+        memory: 20Mi
+
+node:
+  name: csi-nfs-node
+  dnsPolicy: Default  # available values: Default, ClusterFirstWithHostNet, ClusterFirst
+  maxUnavailable: 1
+  logLevel: 5
+  livenessProbe:
+    healthPort: 29653
+  tolerations:
+    - operator: "Exists"
+  resources:
+    livenessProbe:
+      limits:
+        memory: 100Mi
+      requests:
+        cpu: 10m
+        memory: 20Mi
+    nodeDriverRegistrar:
+      limits:
+        memory: 100Mi
+      requests:
+        cpu: 10m
+        memory: 20Mi
+    nfs:
+      limits:
+        memory: 300Mi
+      requests:
+        cpu: 10m
+        memory: 20Mi
+
+## Reference to one or more secrets to be used when pulling images
+## ref: https://kubernetes.io/docs/tasks/configure-pod-container/pull-image-private-registry/
+##
+imagePullSecrets: []
+# - name: "image-pull-secret"
diff --git a/deploy/csi-nfs-controller.yaml b/deploy/csi-nfs-controller.yaml
index 115bd357..be6ed741 100644
--- a/deploy/csi-nfs-controller.yaml
+++ b/deploy/csi-nfs-controller.yaml
@@ -67,7 +67,7 @@ spec:
               cpu: 10m
               memory: 20Mi
         - name: nfs
-          image: gcr.io/k8s-staging-sig-storage/nfsplugin:canary
+          image: registry.k8s.io/sig-storage/nfsplugin:v4.0.0
           securityContext:
             privileged: true
             capabilities:
diff --git a/deploy/csi-nfs-node.yaml b/deploy/csi-nfs-node.yaml
index 214253ab..686205a2 100644
--- a/deploy/csi-nfs-node.yaml
+++ b/deploy/csi-nfs-node.yaml
@@ -78,7 +78,7 @@ spec:
             capabilities:
               add: ["SYS_ADMIN"]
             allowPrivilegeEscalation: true
-          image: gcr.io/k8s-staging-sig-storage/nfsplugin:canary
+          image: registry.k8s.io/sig-storage/nfsplugin:v4.0.0
           args:
             - "-v=5"
             - "--nodeid=$(NODE_ID)"
diff --git a/deploy/v4.0.0/csi-nfs-controller.yaml b/deploy/v4.0.0/csi-nfs-controller.yaml
new file mode 100644
index 00000000..be6ed741
--- /dev/null
+++ b/deploy/v4.0.0/csi-nfs-controller.yaml
@@ -0,0 +1,118 @@
+---
+kind: Deployment
+apiVersion: apps/v1
+metadata:
+  name: csi-nfs-controller
+  namespace: kube-system
+spec:
+  replicas: 1
+  selector:
+    matchLabels:
+      app: csi-nfs-controller
+  template:
+    metadata:
+      labels:
+        app: csi-nfs-controller
+    spec:
+      hostNetwork: true  # controller also needs to mount nfs to create dir
+      dnsPolicy: Default  # available values: Default, ClusterFirstWithHostNet, ClusterFirst
+      serviceAccountName: csi-nfs-controller-sa
+      nodeSelector:
+        kubernetes.io/os: linux  # add "kubernetes.io/role: master" to run controller on master node
+      priorityClassName: system-cluster-critical
+      tolerations:
+        - key: "node-role.kubernetes.io/master"
+          operator: "Exists"
+          effect: "NoSchedule"
+        - key: "node-role.kubernetes.io/controlplane"
+          operator: "Exists"
+          effect: "NoSchedule"
+        - key: "node-role.kubernetes.io/control-plane"
+          operator: "Exists"
+          effect: "NoSchedule"
+      containers:
+        - name: csi-provisioner
+          image: registry.k8s.io/sig-storage/csi-provisioner:v3.1.0
+          args:
+            - "-v=2"
+            - "--csi-address=$(ADDRESS)"
+            - "--leader-election"
+            - "--leader-election-namespace=kube-system"
+          env:
+            - name: ADDRESS
+              value: /csi/csi.sock
+          volumeMounts:
+            - mountPath: /csi
+              name: socket-dir
+          resources:
+            limits:
+              memory: 400Mi
+            requests:
+              cpu: 10m
+              memory: 20Mi
+        - name: liveness-probe
+          image: registry.k8s.io/sig-storage/livenessprobe:v2.6.0
+          args:
+            - --csi-address=/csi/csi.sock
+            - --probe-timeout=3s
+            - --health-port=29652
+            - --v=2
+          volumeMounts:
+            - name: socket-dir
+              mountPath: /csi
+          resources:
+            limits:
+              memory: 100Mi
+            requests:
+              cpu: 10m
+              memory: 20Mi
+        - name: nfs
+          image: registry.k8s.io/sig-storage/nfsplugin:v4.0.0
+          securityContext:
+            privileged: true
+            capabilities:
+              add: ["SYS_ADMIN"]
+            allowPrivilegeEscalation: true
+          imagePullPolicy: IfNotPresent
+          args:
+            - "-v=5"
+            - "--nodeid=$(NODE_ID)"
+            - "--endpoint=$(CSI_ENDPOINT)"
+          env:
+            - name: NODE_ID
+              valueFrom:
+                fieldRef:
+                  fieldPath: spec.nodeName
+            - name: CSI_ENDPOINT
+              value: unix:///csi/csi.sock
+          ports:
+            - containerPort: 29652
+              name: healthz
+              protocol: TCP
+          livenessProbe:
+            failureThreshold: 5
+            httpGet:
+              path: /healthz
+              port: healthz
+            initialDelaySeconds: 30
+            timeoutSeconds: 10
+            periodSeconds: 30
+          volumeMounts:
+            - name: pods-mount-dir
+              mountPath: /var/lib/kubelet/pods
+              mountPropagation: "Bidirectional"
+            - mountPath: /csi
+              name: socket-dir
+          resources:
+            limits:
+              memory: 200Mi
+            requests:
+              cpu: 10m
+              memory: 20Mi
+      volumes:
+        - name: pods-mount-dir
+          hostPath:
+            path: /var/lib/kubelet/pods
+            type: Directory
+        - name: socket-dir
+          emptyDir: {}
diff --git a/deploy/v4.0.0/csi-nfs-driverinfo.yaml b/deploy/v4.0.0/csi-nfs-driverinfo.yaml
new file mode 100644
index 00000000..bb08dbc4
--- /dev/null
+++ b/deploy/v4.0.0/csi-nfs-driverinfo.yaml
@@ -0,0 +1,11 @@
+---
+apiVersion: storage.k8s.io/v1
+kind: CSIDriver
+metadata:
+  name: nfs.csi.k8s.io
+spec:
+  attachRequired: false
+  volumeLifecycleModes:
+    - Persistent
+    - Ephemeral
+  fsGroupPolicy: File
diff --git a/deploy/v4.0.0/csi-nfs-node.yaml b/deploy/v4.0.0/csi-nfs-node.yaml
new file mode 100644
index 00000000..686205a2
--- /dev/null
+++ b/deploy/v4.0.0/csi-nfs-node.yaml
@@ -0,0 +1,130 @@
+---
+kind: DaemonSet
+apiVersion: apps/v1
+metadata:
+  name: csi-nfs-node
+  namespace: kube-system
+spec:
+  updateStrategy:
+    rollingUpdate:
+      maxUnavailable: 1
+    type: RollingUpdate
+  selector:
+    matchLabels:
+      app: csi-nfs-node
+  template:
+    metadata:
+      labels:
+        app: csi-nfs-node
+    spec:
+      hostNetwork: true  # original nfs connection would be broken without hostNetwork setting
+      dnsPolicy: Default  # available values: Default, ClusterFirstWithHostNet, ClusterFirst
+      nodeSelector:
+        kubernetes.io/os: linux
+      tolerations:
+        - operator: "Exists"
+      containers:
+        - name: liveness-probe
+          image: registry.k8s.io/sig-storage/livenessprobe:v2.6.0
+          args:
+            - --csi-address=/csi/csi.sock
+            - --probe-timeout=3s
+            - --health-port=29653
+            - --v=2
+          volumeMounts:
+            - name: socket-dir
+              mountPath: /csi
+          resources:
+            limits:
+              memory: 100Mi
+            requests:
+              cpu: 10m
+              memory: 20Mi
+        - name: node-driver-registrar
+          image: registry.k8s.io/sig-storage/csi-node-driver-registrar:v2.5.0
+          args:
+            - --v=2
+            - --csi-address=/csi/csi.sock
+            - --kubelet-registration-path=$(DRIVER_REG_SOCK_PATH)
+          livenessProbe:
+            exec:
+              command:
+                - /csi-node-driver-registrar
+                - --kubelet-registration-path=$(DRIVER_REG_SOCK_PATH)
+                - --mode=kubelet-registration-probe
+            initialDelaySeconds: 30
+            timeoutSeconds: 15
+          env:
+            - name: DRIVER_REG_SOCK_PATH
+              value: /var/lib/kubelet/plugins/csi-nfsplugin/csi.sock
+            - name: KUBE_NODE_NAME
+              valueFrom:
+                fieldRef:
+                  fieldPath: spec.nodeName
+          volumeMounts:
+            - name: socket-dir
+              mountPath: /csi
+            - name: registration-dir
+              mountPath: /registration
+          resources:
+            limits:
+              memory: 100Mi
+            requests:
+              cpu: 10m
+              memory: 20Mi
+        - name: nfs
+          securityContext:
+            privileged: true
+            capabilities:
+              add: ["SYS_ADMIN"]
+            allowPrivilegeEscalation: true
+          image: registry.k8s.io/sig-storage/nfsplugin:v4.0.0
+          args:
+            - "-v=5"
+            - "--nodeid=$(NODE_ID)"
+            - "--endpoint=$(CSI_ENDPOINT)"
+          env:
+            - name: NODE_ID
+              valueFrom:
+                fieldRef:
+                  fieldPath: spec.nodeName
+            - name: CSI_ENDPOINT
+              value: unix:///csi/csi.sock
+          ports:
+            - containerPort: 29653
+              name: healthz
+              protocol: TCP
+          livenessProbe:
+            failureThreshold: 5
+            httpGet:
+              path: /healthz
+              port: healthz
+            initialDelaySeconds: 30
+            timeoutSeconds: 10
+            periodSeconds: 30
+          imagePullPolicy: "IfNotPresent"
+          volumeMounts:
+            - name: socket-dir
+              mountPath: /csi
+            - name: pods-mount-dir
+              mountPath: /var/lib/kubelet/pods
+              mountPropagation: "Bidirectional"
+          resources:
+            limits:
+              memory: 300Mi
+            requests:
+              cpu: 10m
+              memory: 20Mi
+      volumes:
+        - name: socket-dir
+          hostPath:
+            path: /var/lib/kubelet/plugins/csi-nfsplugin
+            type: DirectoryOrCreate
+        - name: pods-mount-dir
+          hostPath:
+            path: /var/lib/kubelet/pods
+            type: Directory
+        - hostPath:
+            path: /var/lib/kubelet/plugins_registry
+            type: Directory
+          name: registration-dir
diff --git a/deploy/v4.0.0/rbac-csi-nfs-controller.yaml b/deploy/v4.0.0/rbac-csi-nfs-controller.yaml
new file mode 100644
index 00000000..2ac4a680
--- /dev/null
+++ b/deploy/v4.0.0/rbac-csi-nfs-controller.yaml
@@ -0,0 +1,52 @@
+---
+apiVersion: v1
+kind: ServiceAccount
+metadata:
+  name: csi-nfs-controller-sa
+  namespace: kube-system
+
+---
+
+kind: ClusterRole
+apiVersion: rbac.authorization.k8s.io/v1
+metadata:
+  name: nfs-external-provisioner-role
+rules:
+  - apiGroups: [""]
+    resources: ["persistentvolumes"]
+    verbs: ["get", "list", "watch", "create", "delete"]
+  - apiGroups: [""]
+    resources: ["persistentvolumeclaims"]
+    verbs: ["get", "list", "watch", "update"]
+  - apiGroups: ["storage.k8s.io"]
+    resources: ["storageclasses"]
+    verbs: ["get", "list", "watch"]
+  - apiGroups: [""]
+    resources: ["events"]
+    verbs: ["get", "list", "watch", "create", "update", "patch"]
+  - apiGroups: ["storage.k8s.io"]
+    resources: ["csinodes"]
+    verbs: ["get", "list", "watch"]
+  - apiGroups: [""]
+    resources: ["nodes"]
+    verbs: ["get", "list", "watch"]
+  - apiGroups: ["coordination.k8s.io"]
+    resources: ["leases"]
+    verbs: ["get", "list", "watch", "create", "update", "patch"]
+  - apiGroups: [""]
+    resources: ["secrets"]
+    verbs: ["get"]
+---
+
+kind: ClusterRoleBinding
+apiVersion: rbac.authorization.k8s.io/v1
+metadata:
+  name: nfs-csi-provisioner-binding
+subjects:
+  - kind: ServiceAccount
+    name: csi-nfs-controller-sa
+    namespace: kube-system
+roleRef:
+  kind: ClusterRole
+  name: nfs-external-provisioner-role
+  apiGroup: rbac.authorization.k8s.io
diff --git a/docs/install-csi-driver-v4.0.0.md b/docs/install-csi-driver-v4.0.0.md
new file mode 100644
index 00000000..209dd4c5
--- /dev/null
+++ b/docs/install-csi-driver-v4.0.0.md
@@ -0,0 +1,45 @@
+# Install NFS CSI driver v4.0.0 version on a kubernetes cluster
+
+If you have already installed Helm, you can also use it to install this driver. Please check [Installation with Helm](../charts/README.md).
+
+## Install with kubectl
+ - Option#1. remote install
+```console
+curl -skSL https://raw.githubusercontent.com/kubernetes-csi/csi-driver-nfs/v4.0.0/deploy/install-driver.sh | bash -s v4.0.0 --
+```
+
+ - Option#2. local install
+```console
+git clone https://github.com/kubernetes-csi/csi-driver-nfs.git
+cd csi-driver-nfs
+./deploy/install-driver.sh v4.0.0 local
+```
+
+- check pods status:
+```console
+kubectl -n kube-system get pod -o wide -l app=csi-nfs-controller
+kubectl -n kube-system get pod -o wide -l app=csi-nfs-node
+```
+
+example output:
+
+```console
+NAME                                       READY   STATUS    RESTARTS   AGE     IP             NODE
+csi-nfs-controller-56bfddd689-dh5tk       4/4     Running   0          35s     10.240.0.19    k8s-agentpool-22533604-0
+csi-nfs-node-cvgbs                        3/3     Running   0          35s     10.240.0.35    k8s-agentpool-22533604-1
+csi-nfs-node-dr4s4                        3/3     Running   0          35s     10.240.0.4     k8s-agentpool-22533604-0
+```
+
+### clean up NFS CSI driver
+ - Option#1. remote uninstall
+```console
+curl -skSL https://raw.githubusercontent.com/kubernetes-csi/csi-driver-nfs/v4.0.0/deploy/uninstall-driver.sh | bash -s v4.0.0 --
+```
+
+ - Option#2. local uninstall
+```console
+git clone https://github.com/kubernetes-csi/csi-driver-nfs.git
+cd csi-driver-nfs
+git checkout v4.0.0
+./deploy/uninstall-driver.sh v4.0.0 local
+```
diff --git a/docs/install-nfs-csi-driver.md b/docs/install-nfs-csi-driver.md
index 5e0c6e15..71c9dd93 100644
--- a/docs/install-nfs-csi-driver.md
+++ b/docs/install-nfs-csi-driver.md
@@ -1,5 +1,6 @@
 ## Install NFS CSI driver on a Kubernetes cluster
 
  - [install CSI driver master version](./install-csi-driver-master.md)
+ - [install CSI driver v4.0.0 version](./install-csi-driver-v4.0.0.md)
  - [install CSI driver v3.1.0 version](./install-csi-driver-v3.1.0.md)
  - [install CSI driver v3.0.0 version](./install-csi-driver-v3.0.0.md)