diff --git a/.pipelines/build-linux.sh b/.pipelines/build-linux.sh
index f4c92fda2..53f6a3a07 100644
--- a/.pipelines/build-linux.sh
+++ b/.pipelines/build-linux.sh
@@ -14,3 +14,8 @@ cd $DIR/../build/linux
 echo "----------- Build Docker Provider -------------------------------"
 make
 cd $DIR
+
+echo "------------ Bundle Shell Extension Scripts & HELM chart -------------------------"
+cd $DIR/../deployment/arc-k8s-extension/ServiceGroupRoot/Scripts
+tar -czvf ../artifacts.tar.gz ../../../../charts/azuremonitor-containers/ pushChartToAcr.sh
+
diff --git a/.pipelines/pipeline.user.linux.yml b/.pipelines/pipeline.user.linux.yml
index 57273111e..565661d64 100644
--- a/.pipelines/pipeline.user.linux.yml
+++ b/.pipelines/pipeline.user.linux.yml
@@ -24,10 +24,15 @@ restore:
 
 build:
   commands:
-    - !!defaultcommand
+    - !!buildcommand
       name: 'Build Docker Provider Shell Bundle'
       command: '.pipelines/build-linux.sh'
       fail_on_stderr: false
+      artifacts:
+        - from: 'deployment'
+          to: 'build'
+          include:
+            - '**'
 
 package:
   commands:
diff --git a/.pipelines/pull-from-cdpx-and-push-to-ci-acr-linux-image.sh b/.pipelines/pull-from-cdpx-and-push-to-ci-acr-linux-image.sh
old mode 100755
new mode 100644
index 3844ea185..e7d26245f
--- a/.pipelines/pull-from-cdpx-and-push-to-ci-acr-linux-image.sh
+++ b/.pipelines/pull-from-cdpx-and-push-to-ci-acr-linux-image.sh
@@ -35,12 +35,22 @@ echo "end: read appid and appsecret which has read access on cdpx acr"
 # suffix 00 primary and 01 secondary, and we only use primary
 # This configured via pipeline variable
 echo "login to cdpxlinux acr:${CDPX_ACR}"
-docker login $CDPX_ACR  --username $CDPX_ACR_APP_ID --password $CDPX_ACR_APP_SECRET
-echo "login to cdpxlinux acr completed: ${CDPX_ACR}"
+echo $CDPX_ACR_APP_SECRET | docker login $CDPX_ACR  --username $CDPX_ACR_APP_ID --password-stdin
+if [ $? -eq 0 ]; then         
+   echo "login to cdpxlinux acr: ${CDPX_ACR} completed successfully."
+else     
+   echo "-e error login to cdpxlinux acr: ${CDPX_ACR} failed.Please see release task logs."
+   exit 1
+fi  
 
 echo "pull agent image from cdpxlinux acr: ${CDPX_ACR}"
 docker pull ${CDPX_ACR}/official/${CDPX_REPO_NAME}:${CDPX_AGENT_IMAGE_TAG}
-echo "pull image from cdpxlinux acr completed: ${CDPX_ACR}"
+if [ $? -eq 0 ]; then
+   echo "pulling of agent image from cdpxlinux acr: ${CDPX_ACR} completed successfully."
+else
+   echo "-e error pulling of agent image from cdpxlinux acr: ${CDPX_ACR} failed.Please see release task logs."
+   exit 1
+fi  
 
 echo "CI Release name is:"$CI_RELEASE
 imagetag=$CI_RELEASE$CI_IMAGE_TAG_SUFFIX
@@ -51,13 +61,29 @@ echo "CI AGENT REPOSITORY NAME : ${CI_AGENT_REPO}"
 
 echo "tag linux agent image"
 docker tag ${CDPX_ACR}/official/${CDPX_REPO_NAME}:${CDPX_AGENT_IMAGE_TAG} ${CI_ACR}/public/azuremonitor/containerinsights/${CI_AGENT_REPO}:${imagetag}
+if [ $? -eq 0 ]; then         
+   echo "tagging of linux agent image completed successfully."
+else     
+    echo "-e error tagging of linux agent image failed. Please see release task logs."
+   exit 1
+fi  
 
 echo "login ciprod acr":$CI_ACR
-docker login $CI_ACR --username $ACR_APP_ID --password $ACR_APP_SECRET
-echo "login to ${CI_ACR} acr completed"
+echo $ACR_APP_SECRET | docker login $CI_ACR --username $ACR_APP_ID --password-stdin 
+if [ $? -eq 0 ]; then         
+   echo "login to ciprod acr: ${CI_ACR} completed successfully"
+else     
+   echo "-e error login to ciprod acr: ${CI_ACR} failed. Please see release task logs."
+   exit 1
+fi  
 
 echo "pushing the image to ciprod acr:${CI_ACR}"
 docker push ${CI_ACR}/public/azuremonitor/containerinsights/${CI_AGENT_REPO}:${imagetag}
-echo "pushing the image to ciprod acr completed"
+if [ $? -eq 0 ]; then
+   echo "pushing of the image to ciprod acr completed successfully"
+else     
+   echo "-e error pushing of image to ciprod acr failed. Please see release task logs."
+   exit 1
+fi  
 
 echo "end: pull linux agent image from cdpx and push to ciprod acr"
diff --git a/.pipelines/pull-from-cdpx-and-push-to-ci-acr-windows-image.sh b/.pipelines/pull-from-cdpx-and-push-to-ci-acr-windows-image.sh
old mode 100755
new mode 100644
index 095a00039..19fe55722
--- a/.pipelines/pull-from-cdpx-and-push-to-ci-acr-windows-image.sh
+++ b/.pipelines/pull-from-cdpx-and-push-to-ci-acr-windows-image.sh
@@ -34,12 +34,22 @@ echo "end: read appid and appsecret which has read access on cdpx acr"
 # suffix 00 primary and 01 secondary, and we only use primary
 # This configured via pipeline variable
 echo "login to cdpxwindows acr:${CDPX_ACR}"
-docker login $CDPX_ACR  --username $CDPX_ACR_APP_ID --password $CDPX_ACR_APP_SECRET
-echo "login to cdpxwindows acr:${CDPX_ACR} completed"
+echo $CDPX_ACR_APP_SECRET | docker login $CDPX_ACR  --username $CDPX_ACR_APP_ID --password-stdin
+if [ $? -eq 0 ]; then         
+   echo "login to cdpxwindows acr: ${CDPX_ACR} completed successfully."
+else     
+   echo "-e error login to cdpxwindows acr: ${CDPX_ACR} failed.Please see release task logs."
+   exit 1
+fi  
 
 echo "pull image from cdpxwin acr: ${CDPX_ACR}"
 docker pull ${CDPX_ACR}/official/${CDPX_REPO_NAME}:${CDPX_AGENT_IMAGE_TAG}
-echo "pull image from cdpxwin acr completed: ${CDPX_ACR}"
+if [ $? -eq 0 ]; then         
+   echo "pulling of image from cdpxwin acr: ${CDPX_ACR} completed successfully."
+else     
+   echo "pulling of image from cdpxwin acr: ${CDPX_ACR} failed. Please see release task logs."
+   exit 1
+fi  
 
 echo "CI Release name:"$CI_RELEASE
 echo "CI Image Tax suffix:"$CI_IMAGE_TAG_SUFFIX
@@ -49,13 +59,30 @@ echo "agentimagetag="$imagetag
 
 echo "tag windows agent image"
 docker tag ${CDPX_ACR}/official/${CDPX_REPO_NAME}:${CDPX_AGENT_IMAGE_TAG} ${CI_ACR}/public/azuremonitor/containerinsights/${CI_AGENT_REPO}:${imagetag}
+if [ $? -eq 0 ]; then         
+   echo "tagging of windows agent image completed successfully."
+else     
+   echo "-e error tagging of windows agent image failed. Please see release task logs."
+   exit 1
+fi  
 
 echo "login to ${CI_ACR} acr"
-docker login $CI_ACR --username $ACR_APP_ID --password $ACR_APP_SECRET
-echo "login to ${CI_ACR} acr completed"
+echo $ACR_APP_SECRET | docker login $CI_ACR --username $ACR_APP_ID --password-stdin
+if [ $? -eq 0 ]; then
+   echo "login to acr: ${CI_ACR} completed successfully."
+else     
+   echo "login to acr: ${CI_ACR} failed. Please see release task logs."
+   exit 1
+fi  
+
 
 echo "pushing the image to ciprod acr"
 docker push ${CI_ACR}/public/azuremonitor/containerinsights/${CI_AGENT_REPO}:${imagetag}
-echo "pushing the image to ciprod acr completed"
+if [ $? -eq 0 ]; then
+   echo "pushing the image to ciprod acr completed successfully."
+else     
+   echo "pushing the image to ciprod acr failed. Please see release task logs"
+   exit 1
+fi  
 
 echo "end: pull windows agent image from cdpx and push to ciprod acr"
diff --git a/ReleaseProcess.md b/ReleaseProcess.md
index c6f51bb65..8ec91546c 100644
--- a/ReleaseProcess.md
+++ b/ReleaseProcess.md
@@ -35,20 +35,21 @@ Image automatically synched to MCR CN from Public cloud MCR.
 
 - Refer to internal docs for the release process and instructions.
 
-## ARO v3
-
-This needs to be co-ordinated with Red hat  and ARO-RP team for the release and Red hat team will pick up the changes for the release.
-
 ## AKS-Engine
 
 Make PR against [AKS-Engine](https://github.com/Azure/aks-engine). Refer PR https://github.com/Azure/aks-engine/pull/2318
 
-## ARO v4, Azure Arc K8s and OpenShift v4 clusters
-
-Make sure azuremonitor-containers chart yamls updates with all changes going with the release and also make sure to bump the chart version, imagetag and docker provider version etc. Similar to agent container image, build pipeline automatically push the chart to container insights prod acr for canary and prod repos accordingly.
-Both the agent and helm chart will be replicated to `mcr.microsoft.com`.
+## Arc for Kubernetes 
 
-The way, customers will be onboard the monitoring to these clusters using onboarding scripts under `onboarding\managed` directory so please bump chart version for prod release. Once we move to Arc K8s Monitoring extension Public preview, these will be taken care so at that point of time no manual changes like this required.
+Ev2 pipeline used to deploy the chart of the Arc K8s Container Insights Extension as per Safe Deployment Process. 
+Here is the high level process
+```
+ 1. Specify chart version of the release candidate and trigger [container-insights-arc-k8s-extension-ci_prod-release](https://github-private.visualstudio.com/microsoft/_release?_a=releases&view=all)
+ 2. Get the approval from one of team member for the release
+ 3. Once the approved, release should be triggered automatically 
+ 4. use `cimon-arck8s-eastus2euap` for validating latest release in canary region
+ 5. TBD - Notify vendor team for the validation on all Arc K8s supported platforms
+```
 
 ## Microsoft Charts Repo release for On-prem K8s
 
diff --git a/deployment/arc-k8s-extension/ServiceGroupRoot/Parameters/ContainerInsightsExtension.Parameters.json b/deployment/arc-k8s-extension/ServiceGroupRoot/Parameters/ContainerInsightsExtension.Parameters.json
new file mode 100644
index 000000000..a8a99e9f6
--- /dev/null
+++ b/deployment/arc-k8s-extension/ServiceGroupRoot/Parameters/ContainerInsightsExtension.Parameters.json
@@ -0,0 +1,66 @@
+{
+  "$schema": "http://schema.express.azure.com/schemas/2015-01-01-alpha/RolloutParameters.json",
+  "contentVersion": "1.0.0.0",
+  "wait": [
+    {
+      "name": "waitSdpBakeTime",
+      "properties": {
+        "duration": "PT24H"
+      }
+    }
+  ],
+  "shellExtensions": [
+    {
+      "name": "PushChartToACR",
+      "type": "ShellExtensionType",
+      "properties": {
+        "maxexecutiontime": "PT1H"
+      },
+      "package": {
+        "reference": {
+          "path": "artifacts.tar.gz"
+        }
+      },
+      "launch": {
+        "command": [
+          "/bin/bash",
+          "pushChartToAcr.sh"
+        ],
+        "environmentVariables": [
+          {
+            "name": "RELEASE_STAGE",
+            "value": "__RELEASE_STAGE__"
+          },
+          {
+            "name": "ACR_APP_ID",
+            "reference": {
+              "provider": "AzureKeyVault",
+              "parameters": {
+                "secretId": "https://cibuildandreleasekv.vault.azure.net/secrets/ciprodacrappid/e8f47bf7505741ebaf65a4db16ff9fa7"
+              }
+            },
+            "asSecureValue": "true"
+          },
+          {
+            "name": "ACR_APP_SECRET",
+            "reference": {
+              "provider": "AzureKeyVault",
+              "parameters": {
+                "secretId": "https://cibuildandreleasekv.vault.azure.net/secrets/ciprodacrappsecret/8718afcdac114accb8b26f613cef1e1e"
+              }
+            },
+            "asSecureValue": "true"
+          },
+          {
+            "name": "ACR_NAME",
+            "value": "__ACR_NAME__"
+          },
+          {
+            "name": "CHART_VERSION",
+            "value": "__CHART_VERSION__"
+          }
+        ]
+      }
+    }
+  ]
+}
diff --git a/deployment/arc-k8s-extension/ServiceGroupRoot/RolloutSpecs/Public.Canary.RolloutSpec.json b/deployment/arc-k8s-extension/ServiceGroupRoot/RolloutSpecs/Public.Canary.RolloutSpec.json
new file mode 100644
index 000000000..cde103633
--- /dev/null
+++ b/deployment/arc-k8s-extension/ServiceGroupRoot/RolloutSpecs/Public.Canary.RolloutSpec.json
@@ -0,0 +1,29 @@
+{
+  "$schema": "http://schema.express.azure.com/schemas/2015-01-01-alpha/RolloutSpec.json",
+  "ContentVersion": "1.0.0.0",
+  "RolloutMetadata": {
+    "ServiceModelPath": "ServiceModels//Public.ServiceModel.json",   
+    "ScopeBindingsPath": "ScopeBindings//Public.ScopeBindings.json", 
+    "Name": "ContainerInsightsExtension-Canary",
+    "RolloutType": "Major",
+    "BuildSource": {
+      "Parameters": {
+        "VersionFile": "buildver.txt"
+      }
+    },
+    "notification": {
+      "email": {
+        "to": "omscontainers@microsoft.com"
+      }
+    }  
+  },
+  "orchestratedSteps": [
+    {
+      "name": "PushChartToACR",
+      "targetType": "ServiceResource",
+      "targetName": "PushChartToACR-Canary",
+      "actions": [ "Shell/PushChartToACR" ],
+      "dependsOn": [ ]
+    }
+  ]
+}
diff --git a/deployment/arc-k8s-extension/ServiceGroupRoot/RolloutSpecs/Public.FF.RolloutSpec.json b/deployment/arc-k8s-extension/ServiceGroupRoot/RolloutSpecs/Public.FF.RolloutSpec.json
new file mode 100644
index 000000000..1749296c8
--- /dev/null
+++ b/deployment/arc-k8s-extension/ServiceGroupRoot/RolloutSpecs/Public.FF.RolloutSpec.json
@@ -0,0 +1,29 @@
+{
+  "$schema": "http://schema.express.azure.com/schemas/2015-01-01-alpha/RolloutSpec.json",
+  "ContentVersion": "1.0.0.0",
+  "RolloutMetadata": {
+    "ServiceModelPath": "ServiceModels//Public.ServiceModel.json",   
+    "ScopeBindingsPath": "ScopeBindings//Public.ScopeBindings.json", 
+    "Name": "ContainerInsightsExtension-FF",
+    "RolloutType": "Major",
+    "BuildSource": {
+      "Parameters": {
+        "VersionFile": "buildver.txt"
+      }
+    },
+    "notification": {
+      "email": {
+        "to": "omscontainers@microsoft.com"
+      }
+    }
+  },
+  "orchestratedSteps": [
+    {
+      "name": "PushChartToACR",
+      "targetType": "ServiceResource",
+      "targetName": "PushChartToACR-FF",
+      "actions": [ "wait/waitSdpBakeTime", "Shell/PushChartToACR" ],
+      "dependsOn": [ ]
+    }
+  ]
+}
diff --git a/deployment/arc-k8s-extension/ServiceGroupRoot/RolloutSpecs/Public.HighLoad.RolloutSpec.json b/deployment/arc-k8s-extension/ServiceGroupRoot/RolloutSpecs/Public.HighLoad.RolloutSpec.json
new file mode 100644
index 000000000..50729b1ae
--- /dev/null
+++ b/deployment/arc-k8s-extension/ServiceGroupRoot/RolloutSpecs/Public.HighLoad.RolloutSpec.json
@@ -0,0 +1,29 @@
+{
+  "$schema": "http://schema.express.azure.com/schemas/2015-01-01-alpha/RolloutSpec.json",
+  "ContentVersion": "1.0.0.0",
+  "RolloutMetadata": {
+    "ServiceModelPath": "ServiceModels//Public.ServiceModel.json",   
+    "ScopeBindingsPath": "ScopeBindings//Public.ScopeBindings.json", 
+    "Name": "ContainerInsightsExtension-Prod3",
+    "RolloutType": "Major",
+    "BuildSource": {
+      "Parameters": {
+        "VersionFile": "buildver.txt"
+      }
+    },
+    "notification": {
+      "email": {
+        "to": "omscontainers@microsoft.com"
+      }
+    }
+  },
+  "orchestratedSteps": [
+    {
+      "name": "PushChartToACR",
+      "targetType": "ServiceResource",
+      "targetName": "PushChartToACR-HighLoad",
+      "actions": [  "wait/waitSdpBakeTime", "Shell/PushChartToACR" ],
+      "dependsOn": [ ]
+    }
+  ]
+}
diff --git a/deployment/arc-k8s-extension/ServiceGroupRoot/RolloutSpecs/Public.LightLoad.RolloutSpec.json b/deployment/arc-k8s-extension/ServiceGroupRoot/RolloutSpecs/Public.LightLoad.RolloutSpec.json
new file mode 100644
index 000000000..edd61f852
--- /dev/null
+++ b/deployment/arc-k8s-extension/ServiceGroupRoot/RolloutSpecs/Public.LightLoad.RolloutSpec.json
@@ -0,0 +1,29 @@
+{
+  "$schema": "http://schema.express.azure.com/schemas/2015-01-01-alpha/RolloutSpec.json",
+  "ContentVersion": "1.0.0.0",
+  "RolloutMetadata": {
+    "ServiceModelPath": "ServiceModels//Public.ServiceModel.json",   
+    "ScopeBindingsPath": "ScopeBindings//Public.ScopeBindings.json", 
+    "Name": "ContainerInsightsExtension-Prod2",
+    "RolloutType": "Major",
+    "BuildSource": {
+      "Parameters": {
+        "VersionFile": "buildver.txt"
+      }
+    },
+    "notification": {
+      "email": {
+        "to": "omscontainers@microsoft.com"
+      }
+    }
+  },
+  "orchestratedSteps": [
+    {
+      "name": "PushChartToACR",
+      "targetType": "ServiceResource",
+      "targetName": "PushChartToACR-LightLoad",
+      "actions": [ "wait/waitSdpBakeTime", "Shell/PushChartToACR" ],
+      "dependsOn": [ ]
+    }
+  ]
+}
diff --git a/deployment/arc-k8s-extension/ServiceGroupRoot/RolloutSpecs/Public.MC.RolloutSpec.json b/deployment/arc-k8s-extension/ServiceGroupRoot/RolloutSpecs/Public.MC.RolloutSpec.json
new file mode 100644
index 000000000..014f4b092
--- /dev/null
+++ b/deployment/arc-k8s-extension/ServiceGroupRoot/RolloutSpecs/Public.MC.RolloutSpec.json
@@ -0,0 +1,29 @@
+{
+  "$schema": "http://schema.express.azure.com/schemas/2015-01-01-alpha/RolloutSpec.json",
+  "ContentVersion": "1.0.0.0",
+  "RolloutMetadata": {
+    "ServiceModelPath": "ServiceModels//Public.ServiceModel.json",   
+    "ScopeBindingsPath": "ScopeBindings//Public.ScopeBindings.json", 
+    "Name": "ContainerInsightsExtension-MC",
+    "RolloutType": "Major",
+    "BuildSource": {
+      "Parameters": {
+        "VersionFile": "buildver.txt"
+      }
+    },
+    "notification": {
+      "email": {
+        "to": "omscontainers@microsoft.com"
+      }
+    }
+  },
+  "orchestratedSteps": [
+    {
+      "name": "PushChartToACR",
+      "targetType": "ServiceResource",
+      "targetName": "PushChartToACR-MC",
+      "actions": [ "wait/waitSdpBakeTime", "Shell/PushChartToACR" ],
+      "dependsOn": [ ]
+    }
+  ]
+}
diff --git a/deployment/arc-k8s-extension/ServiceGroupRoot/RolloutSpecs/Public.MediumLoad.RolloutSpec.json b/deployment/arc-k8s-extension/ServiceGroupRoot/RolloutSpecs/Public.MediumLoad.RolloutSpec.json
new file mode 100644
index 000000000..cd1befbc3
--- /dev/null
+++ b/deployment/arc-k8s-extension/ServiceGroupRoot/RolloutSpecs/Public.MediumLoad.RolloutSpec.json
@@ -0,0 +1,29 @@
+{
+  "$schema": "http://schema.express.azure.com/schemas/2015-01-01-alpha/RolloutSpec.json",
+  "ContentVersion": "1.0.0.0",
+  "RolloutMetadata": {
+    "ServiceModelPath": "ServiceModels//Public.ServiceModel.json",   
+    "ScopeBindingsPath": "ScopeBindings//Public.ScopeBindings.json", 
+    "Name": "ContainerInsightsExtension-Prod2",
+    "RolloutType": "Major",
+    "BuildSource": {
+      "Parameters": {
+        "VersionFile": "buildver.txt"
+      }
+    },
+    "notification": {
+      "email": {
+        "to": "omscontainers@microsoft.com"
+      }
+    }
+  },
+  "orchestratedSteps": [
+    {
+      "name": "PushChartToACR",
+      "targetType": "ServiceResource",
+      "targetName": "PushChartToACR-MediumLoad",
+      "actions": ["wait/waitSdpBakeTime", "Shell/PushChartToACR" ],
+      "dependsOn": [ ]
+    }
+  ]
+}
diff --git a/deployment/arc-k8s-extension/ServiceGroupRoot/RolloutSpecs/Public.Pilot.RolloutSpec.json b/deployment/arc-k8s-extension/ServiceGroupRoot/RolloutSpecs/Public.Pilot.RolloutSpec.json
new file mode 100644
index 000000000..48c99fce1
--- /dev/null
+++ b/deployment/arc-k8s-extension/ServiceGroupRoot/RolloutSpecs/Public.Pilot.RolloutSpec.json
@@ -0,0 +1,29 @@
+{
+  "$schema": "http://schema.express.azure.com/schemas/2015-01-01-alpha/RolloutSpec.json",
+  "ContentVersion": "1.0.0.0",
+  "RolloutMetadata": {
+    "ServiceModelPath": "ServiceModels//Public.ServiceModel.json",   
+    "ScopeBindingsPath": "ScopeBindings//Public.ScopeBindings.json", 
+    "Name": "ContainerInsightsExtension-Pilot",
+    "RolloutType": "Major",
+    "BuildSource": {
+      "Parameters": {
+        "VersionFile": "buildver.txt"
+      }
+    },
+    "notification": {
+      "email": {
+        "to": "omscontainers@microsoft.com"
+      }
+    }
+  },
+  "orchestratedSteps": [
+    {
+      "name": "PushChartToACR",
+      "targetType": "ServiceResource",
+      "targetName": "PushChartToACR-Pilot",
+      "actions": [ "wait/waitSdpBakeTime", "Shell/PushChartToACR"],
+      "dependsOn": [ ]
+    }
+  ]
+}
diff --git a/deployment/arc-k8s-extension/ServiceGroupRoot/ScopeBindings/Public.ScopeBindings.json b/deployment/arc-k8s-extension/ServiceGroupRoot/ScopeBindings/Public.ScopeBindings.json
new file mode 100644
index 000000000..516eba3e2
--- /dev/null
+++ b/deployment/arc-k8s-extension/ServiceGroupRoot/ScopeBindings/Public.ScopeBindings.json
@@ -0,0 +1,125 @@
+{
+    "$schema": "https://ev2schema.azure.net/schemas/2020-01-01/scopeBindings.json",
+    "contentVersion": "0.0.0.1",
+    "scopeBindings": [       
+        {
+            "scopeTagName": "Canary",
+            "bindings": [
+                {
+                    "find": "__RELEASE_STAGE__",
+                    "replaceWith": "Canary"
+                },               
+                {
+                    "find": "__ACR_NAME__",
+                    "replaceWith": "$(ACRName)"
+                },            
+                {
+                    "find": "__CHART_VERSION__",
+                    "replaceWith": "$(ChartVersion)"
+                }               
+            ]
+        },
+        {
+            "scopeTagName": "Pilot",
+            "bindings": [
+                {
+                    "find": "__RELEASE_STAGE__",
+                    "replaceWith": "Pilot"
+                },                
+                {
+                    "find": "__ACR_NAME__",
+                    "replaceWith": "$(ACRName)"
+                },              
+                {
+                    "find": "__CHART_VERSION__",
+                    "replaceWith": "$(ChartVersion)"
+                }       
+            ]
+        },
+        {
+            "scopeTagName": "LightLoad",
+            "bindings": [
+                {
+                    "find": "__RELEASE_STAGE__",
+                    "replaceWith": "MediumLow"
+                },               
+                {
+                    "find": "__ACR_NAME__",
+                    "replaceWith": "$(ACRName)"
+                },              
+                {
+                    "find": "__CHART_VERSION__",
+                    "replaceWith": "$(ChartVersion)"
+                }                           
+            ]
+        },
+        {
+            "scopeTagName": "MediumLoad",
+            "bindings": [
+                {
+                    "find": "__RELEASE_STAGE__",
+                    "replaceWith": "MediumHigh"
+                },                
+                {
+                    "find": "__ACR_NAME__",
+                    "replaceWith": "$(ACRName)"
+                },              
+                {
+                    "find": "__CHART_VERSION__",
+                    "replaceWith": "$(ChartVersion)"
+                }                     
+            ]
+        },
+        {
+            "scopeTagName": "HighLoad",
+            "bindings": [
+                {
+                    "find": "__RELEASE_STAGE__",
+                    "replaceWith": "HighLoad"
+                },               
+                {
+                    "find": "__ACR_NAME__",
+                    "replaceWith": "$(ACRName)"
+                },              
+                {
+                    "find": "__CHART_VERSION__",
+                    "replaceWith": "$(ChartVersion)"
+                }                                 
+            ]
+        },
+        {
+            "scopeTagName": "FF",
+            "bindings": [
+                {
+                    "find": "__RELEASE_STAGE__",
+                    "replaceWith": "FF"
+                },              
+                {
+                    "find": "__ACR_NAME__",
+                    "replaceWith": "$(ACRName)"
+                },              
+                {
+                    "find": "__CHART_VERSION__",
+                    "replaceWith": "$(ChartVersion)"
+                }                          
+            ]
+        },
+        {
+            "scopeTagName": "MC",
+            "bindings": [
+                {
+                    "find": "__RELEASE_STAGE__",
+                    "replaceWith": "MC"
+                },              
+                {
+                    "find": "__ACR_NAME__",
+                    "replaceWith": "$(ACRName)"
+                },              
+                {
+                    "find": "__CHART_VERSION__",
+                    "replaceWith": "$(ChartVersion)"
+                }                
+            ]
+        }                                                                                                                                                   
+    ]
+}
diff --git a/deployment/arc-k8s-extension/ServiceGroupRoot/Scripts/pushChartToAcr.sh b/deployment/arc-k8s-extension/ServiceGroupRoot/Scripts/pushChartToAcr.sh
new file mode 100644
index 000000000..520557592
--- /dev/null
+++ b/deployment/arc-k8s-extension/ServiceGroupRoot/Scripts/pushChartToAcr.sh
@@ -0,0 +1,181 @@
+#!/bin/bash
+
+export HELM_EXPERIMENTAL_OCI=1
+export MCR_NAME="mcr.microsoft.com"
+# for prod-> stable and for test -> preview
+export REPO_TYPE="stable"
+
+# repo paths for arc k8s extension roll-out
+# canary region
+export CANARY_REGION_REPO_PATH="azuremonitor/containerinsights/canary/${REPO_TYPE}/azuremonitor-containers"
+# pilot region
+export PILOT_REGION_REPO_PATH="azuremonitor/containerinsights/prod1/${REPO_TYPE}/azuremonitor-containers"
+# light load regions 
+export LIGHT_LOAD_REGION_REPO_PATH="azuremonitor/containerinsights/prod2/${REPO_TYPE}/azuremonitor-containers"
+# medium load regions
+export MEDIUM_LOAD_REGION_REPO_PATH="azuremonitor/containerinsights/prod3/${REPO_TYPE}/azuremonitor-containers"
+# high load regions
+export HIGH_LOAD_REGION_REPO_PATH="azuremonitor/containerinsights/prod4/${REPO_TYPE}/azuremonitor-containers"
+# FairFax regions
+export FF_REGION_REPO_PATH="azuremonitor/containerinsights/prod5/${REPO_TYPE}/azuremonitor-containers"
+# Mooncake regions 
+export MC_REGION_REPO_PATH="azuremonitor/containerinsights/prod6/${REPO_TYPE}/azuremonitor-containers"
+
+# pull chart from previous stage mcr and push chart to next stage acr
+pull_chart_from_source_mcr_to_push_to_dest_acr() {
+    srcMcrFullPath=${1}
+    destAcrFullPath=${2}
+
+    if [ -z $srcMcrFullPath ]; then
+       echo "-e error source mcr path must be provided "
+       exit 1
+    fi
+
+    if [ -z $destAcrFullPath ]; then
+       echo "-e error dest acr path must be provided "
+       exit 1
+    fi
+    
+    echo "Pulling chart from MCR:${srcMcrFullPath} ..."
+    helm chart pull ${srcMcrFullPath}
+    if [ $? -eq 0 ]; then
+      echo "Pulling chart from MCR:${srcMcrFullPath} completed successfully."
+    else
+      echo "-e error Pulling chart from MCR:${srcMcrFullPath} failed. Please review Ev2 pipeline logs for more details on the error."
+      exit 1
+    fi   
+
+    echo "Exporting chart to current directory ..."    
+    helm chart export ${srcMcrFullPath}
+    if [ $? -eq 0 ]; then
+      echo "Exporting chart to current directory completed successfully."
+    else
+      echo "-e error Exporting chart to current directory failed. Please review Ev2 pipeline logs for more details on the error."
+      exit 1
+    fi      
+
+    echo "save the chart locally with dest acr full path : ${destAcrFullPath} ..."    
+    helm chart save azuremonitor-containers/ ${destAcrFullPath} 
+    if [ $? -eq 0 ]; then      
+      echo "save the chart locally with dest acr full path : ${destAcrFullPath} completed successfully."
+    else     
+      echo "-e error save the chart locally with dest acr full path : ${destAcrFullPath} failed. Please review Ev2 pipeline logs for more details on the error."
+      exit 1
+    fi      
+    
+    echo "pushing the chart to acr path: ${destAcrFullPath} ..."
+    helm chart push ${destAcrFullPath} 
+    if [ $? -eq 0 ]; then            
+      echo "pushing the chart to acr path: ${destAcrFullPath} completed successfully."
+    else     
+      echo "-e error pushing the chart to acr path: ${destAcrFullPath} failed. Please review Ev2 pipeline logs for more details on the error."
+      exit 1
+    fi       
+}
+
+# push to local release candidate chart to canary region
+push_local_chart_to_canary_region() {
+  destAcrFullPath=${1}
+  if [ -z $destAcrFullPath ]; then
+      echo "-e error dest acr path must be provided "
+      exit 1
+  fi
+
+  echo "save the chart locally with dest acr full path : ${destAcrFullPath} ..."    
+  helm chart save charts/azuremonitor-containers/ $destAcrFullPath
+  if [ $? -eq 0 ]; then            
+    echo "save the chart locally with dest acr full path : ${destAcrFullPath} completed."
+  else     
+    echo "-e error save the chart locally with dest acr full path : ${destAcrFullPath} failed. Please review Ev2 pipeline logs for more details on the error."
+    exit 1
+  fi       
+
+  echo "pushing the chart to acr path: ${destAcrFullPath} ..."
+  helm chart push $destAcrFullPath
+  if [ $? -eq 0 ]; then            
+    echo "pushing the chart to acr path: ${destAcrFullPath} completed successfully."
+  else     
+    echo "-e error pushing the chart to acr path: ${destAcrFullPath} failed.Please review Ev2 pipeline logs for more details on the error."
+    exit 1
+  fi       
+}
+
+echo "START - Release stage : ${RELEASE_STAGE}"
+
+# login to acr
+echo "Using acr : ${ACR_NAME}"
+echo "Using acr repo type: ${REPO_TYPE}"
+
+echo "login to acr:${ACR_NAME} using helm ..."
+echo $ACR_APP_SECRET | helm registry login $ACR_NAME  --username $ACR_APP_ID --password-stdin 
+if [ $? -eq 0 ]; then
+  echo "login to acr:${ACR_NAME} using helm completed successfully."
+else
+  echo "-e error login to acr:${ACR_NAME} using helm failed. Please review Ev2 pipeline logs for more details on the error."
+  exit 1
+fi   
+
+case $RELEASE_STAGE in
+
+  Canary)
+    echo "START: Release stage - Canary"
+    destAcrFullPath=${ACR_NAME}/public/${CANARY_REGION_REPO_PATH}:${CHART_VERSION}  
+    push_local_chart_to_canary_region $destAcrFullPath     
+    echo "END: Release stage - Canary"
+    ;;
+
+  Pilot | Prod1)    
+    echo "START: Release stage - Pilot"    
+    srcMcrFullPath=${MCR_NAME}/${CANARY_REGION_REPO_PATH}:${CHART_VERSION}   
+    destAcrFullPath=${ACR_NAME}/public/${PILOT_REGION_REPO_PATH}:${CHART_VERSION}   
+    pull_chart_from_source_mcr_to_push_to_dest_acr $srcMcrFullPath $destAcrFullPath          
+    echo "END: Release stage - Pilot"    
+    ;;
+
+  LightLoad | Pord2)    
+    echo "START: Release stage - Light Load Regions"    
+    srcMcrFullPath=${MCR_NAME}/${PILOT_REGION_REPO_PATH}:${CHART_VERSION}
+    destAcrFullPath=${ACR_NAME}/public/${LIGHT_LOAD_REGION_REPO_PATH}:${CHART_VERSION}
+    pull_chart_from_source_mcr_to_push_to_dest_acr $srcMcrFullPath $destAcrFullPath              
+    echo "END: Release stage - Light Load Regions"    
+    ;;
+   
+  MediumLoad | Prod3)    
+    echo  "START: Release stage - Medium Load Regions"    
+    srcMcrFullPath=${MCR_NAME}/${LIGHT_LOAD_REGION_REPO_PATH}:${CHART_VERSION}
+    destAcrFullPath=${ACR_NAME}/public/${MEDIUM_LOAD_REGION_REPO_PATH}:${CHART_VERSION}
+    pull_chart_from_source_mcr_to_push_to_dest_acr $srcMcrFullPath $destAcrFullPath     
+    echo  "END: Release stage - Medium Load Regions"
+    ;;
+
+  HighLoad | Prod4)    
+    echo  "START: Release stage - High Load Regions"    
+    srcMcrFullPath=${MCR_NAME}/${MEDIUM_LOAD_REGION_REPO_PATH}:${CHART_VERSION} 
+    destAcrFullPath=${ACR_NAME}/public/${HIGH_LOAD_REGION_REPO_PATH}:${CHART_VERSION}   
+    pull_chart_from_source_mcr_to_push_to_dest_acr $srcMcrFullPath $destAcrFullPath         
+    echo  "END: Release stage - High Load Regions"  
+    ;;  
+
+  FF | Prod5)    
+    echo  "START: Release stage - FF"    
+    srcMcrFullPath=${MCR_NAME}/${HIGH_LOAD_REGION_REPO_PATH}:${CHART_VERSION}        
+    destAcrFullPath=${ACR_NAME}/public/${FF_REGION_REPO_PATH}:${CHART_VERSION}
+    pull_chart_from_source_mcr_to_push_to_dest_acr $srcMcrFullPath $destAcrFullPath                   
+    echo  "END: Release stage - FF"     
+    ;;    
+
+  MC | Prod6)
+    echo "START: Release stage - MC"    
+    srcMcrFullPath=${MCR_NAME}/${FF_REGION_REPO_PATH}:${CHART_VERSION}            
+    destAcrFullPath=${ACR_NAME}/public/${MC_REGION_REPO_PATH}:${CHART_VERSION}
+    pull_chart_from_source_mcr_to_push_to_dest_acr $srcMcrFullPath $destAcrFullPath
+    echo "END: Release stage - MC"     
+    ;;    
+
+  *)
+    echo -n "unknown release stage"
+    exit 1
+    ;;
+esac
+
+echo "END - Release stage : ${RELEASE_STAGE}"
diff --git a/deployment/arc-k8s-extension/ServiceGroupRoot/ServiceModels/Public.ServiceModel.json b/deployment/arc-k8s-extension/ServiceGroupRoot/ServiceModels/Public.ServiceModel.json
new file mode 100644
index 000000000..71081661a
--- /dev/null
+++ b/deployment/arc-k8s-extension/ServiceGroupRoot/ServiceModels/Public.ServiceModel.json
@@ -0,0 +1,159 @@
+{
+    "$schema": "http://schema.express.azure.com/schemas/2015-01-01-alpha/ServiceModel.json",
+    "ContentVersion": "0.0.0.1",
+    "ServiceMetadata": {
+      "ServiceGroup": "ContainerInsightsExtension",
+      "Environment": "Prod"
+    },
+    "ServiceResourceGroupDefinitions": [
+      {
+        "Name": "ARC-Extension-ServiceResourceGroupDefinition",
+        "ServiceResourceDefinitions": [
+          {
+            "Name": "ShellExtension",
+            "ComposedOf": {
+              "Extension": {
+                "Shell": [
+                  {
+                    "type": "ShellExtensionType",
+                    "properties": {
+                      "imageName": "adm-ubuntu-1804-l",
+                      "imageVersion": "v18"
+                    }
+                  }
+                ]
+              }
+            }
+          }
+        ]
+      }
+    ],
+    "ServiceResourceGroups": [     
+      {
+        "AzureResourceGroupName": "ContainerInsightsExtension-Canary-Release",
+        "Location": "eastus2",
+        "InstanceOf": "ARC-Extension-ServiceResourceGroupDefinition",
+        "AzureSubscriptionId": "5fab7b6f-6150-42fe-89e1-0f07a0a9a46f",  
+        "ScopeTags": [
+          {
+            "Name": "Canary"
+          }
+        ],     
+        "ServiceResources": [
+          {
+            "Name": "PushChartToACR-Canary",
+            "InstanceOf": "ShellExtension",
+            "RolloutParametersPath": "Parameters\\ContainerInsightsExtension.Parameters.json"
+          }
+        ]
+      },
+      {
+        "AzureResourceGroupName": "ContainerInsightsExtension-Pilot-Release",
+        "Location": "eastus2",
+        "InstanceOf": "ARC-Extension-ServiceResourceGroupDefinition",
+        "AzureSubscriptionId": "5fab7b6f-6150-42fe-89e1-0f07a0a9a46f",  
+        "ScopeTags": [
+          {
+            "Name": "Pilot"
+          }
+        ],     
+        "ServiceResources": [
+          {
+            "Name": "PushChartToACR-Pilot",
+            "InstanceOf": "ShellExtension",
+            "RolloutParametersPath": "Parameters\\ContainerInsightsExtension.Parameters.json"
+          }
+        ]
+      },
+      {
+        "AzureResourceGroupName": "ContainerInsightsExtension-LightLoad-Release",
+        "Location": "eastus2",
+        "InstanceOf": "ARC-Extension-ServiceResourceGroupDefinition",
+        "AzureSubscriptionId": "5fab7b6f-6150-42fe-89e1-0f07a0a9a46f",  
+        "ScopeTags": [
+          {
+            "Name": "LightLoad"
+          }
+        ],     
+        "ServiceResources": [
+          {
+            "Name": "PushChartToACR-LightLoad",
+            "InstanceOf": "ShellExtension",
+            "RolloutParametersPath": "Parameters\\ContainerInsightsExtension.Parameters.json"
+          }
+        ]
+      },
+      {
+        "AzureResourceGroupName": "ContainerInsightsExtension-MediumLoad-Release",
+        "Location": "eastus2",
+        "InstanceOf": "ARC-Extension-ServiceResourceGroupDefinition",
+        "AzureSubscriptionId": "5fab7b6f-6150-42fe-89e1-0f07a0a9a46f",  
+        "ScopeTags": [
+          {
+            "Name": "MediumLoad"
+          }
+        ],     
+        "ServiceResources": [
+          {
+            "Name": "PushChartToACR-MediumLoad",
+            "InstanceOf": "ShellExtension",
+            "RolloutParametersPath": "Parameters\\ContainerInsightsExtension.Parameters.json"
+          }
+        ]
+      },
+      {
+        "AzureResourceGroupName": "ContainerInsightsExtension-HighLoad-Release",
+        "Location": "eastus2",
+        "InstanceOf": "ARC-Extension-ServiceResourceGroupDefinition",
+        "AzureSubscriptionId": "5fab7b6f-6150-42fe-89e1-0f07a0a9a46f",  
+        "ScopeTags": [
+          {
+            "Name": "HighLoad"
+          }
+        ],     
+        "ServiceResources": [
+          {
+            "Name": "PushChartToACR-HighLoad",
+            "InstanceOf": "ShellExtension",
+            "RolloutParametersPath": "Parameters\\ContainerInsightsExtension.Parameters.json"
+          }
+        ]
+      },
+      {
+        "AzureResourceGroupName": "ContainerInsightsExtension-FF-Release",
+        "Location": "eastus2",
+        "InstanceOf": "ARC-Extension-ServiceResourceGroupDefinition",
+        "AzureSubscriptionId": "5fab7b6f-6150-42fe-89e1-0f07a0a9a46f",  
+        "ScopeTags": [
+          {
+            "Name": "FF"
+          }
+        ],     
+        "ServiceResources": [
+          {
+            "Name": "PushChartToACR-FF",
+            "InstanceOf": "ShellExtension",
+            "RolloutParametersPath": "Parameters\\ContainerInsightsExtension.Parameters.json"
+          }
+        ]
+      },
+      {
+        "AzureResourceGroupName": "ContainerInsightsExtension-MC-Release",
+        "Location": "eastus2",
+        "InstanceOf": "ARC-Extension-ServiceResourceGroupDefinition",
+        "AzureSubscriptionId": "5fab7b6f-6150-42fe-89e1-0f07a0a9a46f",  
+        "ScopeTags": [
+          {
+            "Name": "MC"
+          }
+        ],     
+        "ServiceResources": [
+          {
+            "Name": "PushChartToACR-MC",
+            "InstanceOf": "ShellExtension",
+            "RolloutParametersPath": "Parameters\\ContainerInsightsExtension.Parameters.json"
+          }
+        ]
+      }                                                                                                  
+    ]
+  }
diff --git a/deployment/arc-k8s-extension/ServiceGroupRoot/buildver.txt b/deployment/arc-k8s-extension/ServiceGroupRoot/buildver.txt
new file mode 100644
index 000000000..1921233b3
--- /dev/null
+++ b/deployment/arc-k8s-extension/ServiceGroupRoot/buildver.txt
@@ -0,0 +1 @@
+1.0.0.0