- function wrapper parses the request according to Content-Type header - can be json, yaml, text, binary - function wrapper injects secrets into the function invocation context - secret names are provided in SECRETS env var - Kubernetes secrets (file-system based) are used to get the secret data - function wrapper injects request metadata (method, URI, headers) into the function invocation context - function wrapper formats the response according to Accept header - sets Content-Type in the response - uses application/json by default - function wrapper enforces invocation timeout set in TIMEOUT env var - no value or 0 means no timeout