containers should be provisioned separately