updating helm charts for neo v3.x

Author: romdalf

charts/netapp-copilot-connector/Chart.yaml

@@ -1,6 +1,6 @@
 apiVersion: v2
 name: netapp-connector
-version: 26.10.4
-description: NetApp Neo v2.x for Microsoft 365 Copilot Connector Helm Chart
-appVersion: "2.2.5"
+version: 26.11.1
+description: NetApp Neo v3.x for Microsoft 365 Copilot Connector Helm Chart
+appVersion: "3.0.4"
 type: application

charts/netapp-copilot-connector/README.md

@@ -1,22 +1,21 @@
 # NetApp Neo for Microsoft 365 Copilot - Helm Chart
 
-This Helm chart deploys NetApp Neo for Microsoft 365 Copilot on a Kubernetes cluster using a `StatefulSet` for stable, persistent storage.
+This Helm chart deploys NetApp Neo for Microsoft 365 Copilot on a Kubernetes cluster using a `Deployment` for scalable application management.
 
 ## Overview
 
 The chart bootstraps a deployment of NetApp Neo, which includes the following Kubernetes resources:
-- **StatefulSet**: Manages the connector pod, ensuring stable network identity and storage.
-- **PersistentVolumeClaim**: Provides persistent storage for connector data (e.g., database).
+- **Deployment**: Manages the connector pod with configurable replicas and rolling updates.
 - **Service**: Exposes the connector within the cluster on a stable endpoint.
-- **Secret**: Securely stores sensitive credentials like Microsoft Graph API keys and the NetApp license.
+- **Secret**: Securely stores sensitive credentials like Microsoft Graph API keys, NetApp license, and database connection details.
 - **ConfigMap**: Manages non-sensitive environment variables and configuration.
 - **Ingress**: (Optional) Manages external access to the connector service.
 
 ## Prerequisites
 
 - Kubernetes cluster (v1.19+ recommended)
 - Helm package manager (v3+)
-- A default StorageClass configured in your cluster for PersistentVolume provisioning.
+- External database (PostgreSQL or MySQL) for connector data storage
 
 ## Installation Guide
 
@@ -37,13 +36,15 @@ There are two primary methods for installing the chart: using command-line flags
 For quick tests, you can pass parameters directly using the `--set` flag.
 
 ```sh
-helm install netapp-connector innovation-labs/netapp-connector --version 26.10.4 \
+helm install netapp-connector innovation-labs/netapp-connector --version 26.11.1 \
   --namespace netapp-connector \
   --create-namespace \
   --set main.credentials.MS_GRAPH_CLIENT_ID="<your-graph-client-id>" \
   --set main.credentials.MS_GRAPH_CLIENT_SECRET="<your-graph-client-secret>" \
   --set main.credentials.MS_GRAPH_TENANT_ID="<your-graph-tenant-id>" \
-  --set main.credentials.NETAPP_CONNECTOR_LICENSE="<your-license-key>"
+  --set main.credentials.NETAPP_CONNECTOR_LICENSE="<your-license-key>" \
+  --set main.env.DB_TYPE=postgres" \
+  --set main.env.DATABASE_URL="postgresql://user:password@hostname:5432/database"
 ```
 
 #### Method 2: Using a Custom Values File (Recommended for Production)
@@ -62,6 +63,11 @@ For production environments, it is highly recommended to use a custom `values.ya
         MS_GRAPH_TENANT_ID: "<your-graph-tenant-id>"
         NETAPP_CONNECTOR_LICENSE: "<your-license-key>"
 
+      # --- Database Configuration ---
+      env:
+        DB_TYPE: "postgres"  # or "mysql"
+        DATABASE_URL: "postgresql://user:password@hostname:5432/database"
+
       # --- Optional Ingress Configuration ---
       ingress:
         enabled: true
@@ -79,14 +85,35 @@ For production environments, it is highly recommended to use a custom `values.ya
 2.  Install the chart using your custom values file:
 
     ```sh
-    helm install netapp-connector innovation-labs/netapp-connector --version 26.10.3 \
+    helm install netapp-connector innovation-labs/netapp-connector --version 26.11.1 \
       --namespace netapp-connector \
       --create-namespace \
       -f my-values.yaml
     ```
 
 > [!IMPORTANT]
-> The connector will not start correctly without the four mandatory `main.credentials` values being set, regardless of the installation method.
+> The connector requires the following mandatory values to start correctly:
+> - `main.credentials.MS_GRAPH_CLIENT_ID`
+> - `main.credentials.MS_GRAPH_CLIENT_SECRET` 
+> - `main.credentials.MS_GRAPH_TENANT_ID`
+> - `main.credentials.NETAPP_CONNECTOR_LICENSE`
+> - `main.env.DATABASE_URL` (connection string to your external database)
+
+## Database Setup
+
+The connector requires an external database (PostgreSQL or MySQL) for storing connector data. Ensure your database is accessible from the Kubernetes cluster and configure the connection string in the `DATABASE_URL` parameter.
+
+### PostgreSQL Example:
+
+```
+postgresql://username:password@hostname:5432/database_name
+```
+
+### MySQL Example:
+
+```
+mysql://username:password@hostname:3306/database_name
+```
 
 ## Upgrading the Chart
 
@@ -96,11 +123,11 @@ To upgrade an existing release, use `helm upgrade`. The `--reuse-values` flag is
 # 1. Update your local chart repository
 helm repo update
 
-# 2. Upgrade the release to a new version (e.g., 2.2.5)
+# 2. Upgrade the release to a new version (e.g., 3.0.4)
 helm upgrade netapp-connector innovation-labs/netapp-connector \
   --namespace netapp-connector \
   --reuse-values \
-  --set main.image.tag="2.2.5"
+  --set main.image.tag="3.0.4"
 ```
 
 ## Uninstallation
@@ -112,7 +139,7 @@ helm uninstall netapp-connector --namespace netapp-connector
 ```
 
 > [!NOTE]
-> This command removes the StatefulSet, Service, and other resources but **does not delete the PersistentVolumeClaim (PVC)**. Your data will be preserved. To permanently delete all data, you must manually delete the PVC.
+> This command removes the Deployment, Service, and other Kubernetes resources. Your external database data will remain intact as it's managed separately from the Helm chart.
 
 ## Configuration Parameters
 
@@ -121,7 +148,7 @@ The following table lists the configurable parameters of NetApp Neo chart and th
 | Parameter | Description | Default |
 |-----------|-------------|---------|
 | `main.name` | The base name for all created resources. | `netapp-connector-main` |
-| `main.replicaCount` | Number of connector pods to run. Only 1 is supported. | `1` |
+| `main.replicaCount` | Number of connector pods to run. | `1` |
 | `main.image.repository` | The container image repository. | `ghcr.io/netapp/netapp-copilot-connector` |
 | `main.image.tag` | The container image tag. If empty, defaults to the chart's `appVersion`. | `""` |
 | `main.image.pullPolicy` | The image pull policy. | `Always` |
@@ -133,11 +160,15 @@ The following table lists the configurable parameters of NetApp Neo chart and th
 | `main.ingress.pathType` | The path type for the Ingress rule (`Prefix`, `Exact`, `ImplementationSpecific`). | `Prefix` |
 | `main.ingress.className` | The `ingressClassName` to associate with the Ingress. | `""` |
 | `main.ingress.tls` | Ingress TLS configuration (list of objects with `secretName` and `hosts`). | `[]` |
-| `main.persistence.enabled` | If true, create a `PersistentVolumeClaim`. | `true` |
-| `main.persistence.accessMode` | The access mode for the PVC. | `ReadWriteOnce` |
-| `main.persistence.size` | The size of the persistent volume. | `1Gi` |
-| `main.persistence.mountPath` | The path inside the container where the volume is mounted. | `/app/data` |
-| `main.env.*` | Non-sensitive environment variables. See `values.yaml` for all options. | (various) |
+| `main.env.PORT` | The port the application runs on. | `8080` |
+| `main.env.DB_TYPE` | Database type (`postgres` or `mysql`). | `postgres` |
+| `main.env.DATABASE_URL` | Database connection URL. **Must be provided by the user.** | `postgresql://postgres:neodbsecret@neodb:5432/neoconnectortest` |
+| `main.env.HTTPS_PROXY` | HTTPS proxy configuration. | `""` |
+| `main.env.PROXY_USERNAME` | Proxy username if authentication is required. | `""` |
+| `main.env.PROXY_PASSWORD` | Proxy password if authentication is required. | `""` |
+| `main.env.GRAPH_VERIFY_SSL` | Whether to verify SSL certificates for Microsoft Graph calls. | `""` |
+| `main.env.SSL_CERT_FILE` | Custom SSL certificate file content. | `""` |
+| `main.env.GRAPH_TIMEOUT` | Timeout for Microsoft Graph API calls. | `""` |
 | `main.credentials.*` | Sensitive credentials stored in a Secret. **Must be provided by the user.** | (placeholders) |
 
 ---

…lot-connector/templates/statefulset.yaml …ilot-connector/templates/deployment.yamlcharts/netapp-copilot-connector/templates/statefulset.yaml renamed to charts/netapp-copilot-connector/templates/deployment.yaml charts/netapp-copilot-connector/templates/statefulset.yaml renamed to charts/netapp-copilot-connector/templates/deployment.yaml

@@ -1,5 +1,5 @@
 apiVersion: apps/v1
-kind: StatefulSet
+kind: Deployment
 metadata:
   name: {{ .Values.main.name }}
   namespace: {{ .Release.Namespace }}
@@ -102,14 +102,22 @@ spec:
                 secretKeyRef:
                   name: {{ .Values.main.name }}
                   key: NETAPP_CONNECTOR_LICENSE
+            - name: DB_TYPE
+              valueFrom:
+                secretKeyRef:
+                  name: {{ .Values.main.name }}
+                  key: DB_TYPE
+            - name: DATABASE_URL
+              valueFrom:
+                secretKeyRef:
+                  name: {{ .Values.main.name }}
+                  key: DATABASE_URL
           securityContext:
             capabilities:
               add: ["SYS_ADMIN", "DAC_READ_SEARCH", "DAC_OVERRIDE"]
             allowPrivilegeEscalation: true
             privileged: true
           volumeMounts:
-            - name: data
-              mountPath: {{ .Values.main.persistence.mountPath }}
             {{- if .Values.main.env.SSL_CERT_FILE }}
             - name: ssl-cert
               mountPath: /app/ssl_certs/custom_ca_bundle.pem
@@ -121,12 +129,4 @@ spec:
           secret:
             secretName: {{ .Values.main.name }}-ssl-cert
         {{- end }}
-      restartPolicy: Always
-  volumeClaimTemplates:
-    - metadata:
-        name: data
-      spec:
-        accessModes: [ {{ .Values.main.persistence.accessMode }} ]
-        resources:
-          requests:
-            storage: {{ .Values.main.persistence.size }}
+      restartPolicy: Always

charts/netapp-copilot-connector/templates/secret.yaml

@@ -11,4 +11,6 @@ stringData:
   MS_GRAPH_CLIENT_ID: {{ .Values.main.credentials.MS_GRAPH_CLIENT_ID | quote }}
   MS_GRAPH_CLIENT_SECRET: {{ .Values.main.credentials.MS_GRAPH_CLIENT_SECRET | quote }}
   MS_GRAPH_TENANT_ID: {{ .Values.main.credentials.MS_GRAPH_TENANT_ID | quote }}
-  NETAPP_CONNECTOR_LICENSE: {{ .Values.main.credentials.NETAPP_CONNECTOR_LICENSE | quote }} 
+  NETAPP_CONNECTOR_LICENSE: {{ .Values.main.credentials.NETAPP_CONNECTOR_LICENSE | quote }} 
+  DB_TYPE: {{ .Values.main.env.DB_TYPE | quote }}
+  DATABASE_URL: {{ .Values.main.env.DATABASE_URL | quote }}

…-connector/templates/ssl-cert-secret.yml …connector/templates/ssl-cert-secret.yamlcharts/netapp-copilot-connector/templates/ssl-cert-secret.yml renamed to charts/netapp-copilot-connector/templates/ssl-cert-secret.yaml charts/netapp-copilot-connector/templates/ssl-cert-secret.yml renamed to charts/netapp-copilot-connector/templates/ssl-cert-secret.yaml

@@ -22,19 +22,15 @@ main:
   env:
     PORT: 8080
     PYTHONUNBUFFERED: 1
-    DB_PATH: "data/database.db"
     HTTPS_PROXY: ""
     PROXY_USERNAME: ""
     PROXY_PASSWORD: ""
     GRAPH_VERIFY_SSL: ""
     GRAPH_TIMEOUT: ""
     SSL_CERT_FILE: ""
     SSL_CERT_FILE_PATH: ""
-  persistence:
-    enabled: true
-    accessMode: ReadWriteOnce
-    size: 1Gi
-    mountPath: /app/data
+    DB_TYPE: postgres # or mysql
+    DATABASE_URL: postgresql://postgres:neodbsecret@neodb:5432/neoconnectortest # or mysql://user:password@localhost:3306/netapp_connector
   credentials:
     MS_GRAPH_CONNECTOR_ID: "netappconnector"
     MS_GRAPH_CONNECTOR_DESCRIPTION: "The connector contains information contained in the on premises or on-prem file share server. This contains documents and files. These are of type DOC, DOCM, DOCX, DOT, DOTX, EML, GIF, HTML, JPEG, JPG, MHT, MHTML, MSG, NWS, OBD, OBT, ODP, ODS, ODT, ONE, PDF, PNG, POT, PPS, PPT, PPTM, PPTX, TXT, XLB, XLC, XLSB, XLS, XLSX, XLT, XLXM, XML, XPS, and ZIP."